Privacy policy

1. Data controller

BeeHive (mobile app and beehiveevents.app website) is a service operated by Casabee, sole trader, 2 boulevard Loucheur, 40130 Capbreton, France — SIRET 911 440 014 00015. Contact: contact@casabee.fr.

2. Data we collect

BeeHive app users

• E-mail address (if you create an account, verified with a one-time code), preferences (categories, favourites), and your birthday if you choose to provide it;
• Location (with your permission) or a city you select manually, in order to display events near you;
• Technical device identifier (to operate the service).

Professional and artist accounts

• Name (or stage name), e-mail, password (hashed), area of activity, published photos and images, biography, streaming links, artistic categories, website;
• If you connect your Instagram account (with your explicit consent, collected and logged): the account’s ID and username, and its public posts and stories, for the sole purpose of automatically detecting your events. Access is read-only, through Meta’s official API, and can be revoked at any time from your settings.

3. Purposes and legal bases

• Providing the service (accounts, event publication, artist pages) — performance of the contract;
• Automatic event detection from connected Instagram posts — consent;
• Local personalisation (nearby events, preferences) — consent / legitimate interest;
• Security, abuse prevention, legal obligations — legitimate interest / legal obligation.

4. Processors and recipients

Your data is processed by service providers acting on our behalf, under contracts that comply with the GDPR:

• Meta Platforms (Instagram API): connection of professional/artist accounts;
• Artificial intelligence providers (OpenAI, Mistral AI): analysis of the collected posts in order to extract event information (dates, places, descriptions);
• DeepL: automatic translation of content (descriptions, biographies);
• UploadThing: image hosting;
• Stripe: payment of professional subscriptions (we never store your bank details);
• Technical providers for access to public Instagram content and for sending transactional e-mails;
• Hostinger: hosting of the website and servers.

Some providers are located outside the European Union; such transfers are covered by the European Commission’s standard contractual clauses or an equivalent adequacy mechanism.

5. Retention periods

• Account: for as long as you use the service;
• Images and translations of past events: purged one week after the event date;
• Instagram access tokens: deleted and revoked as soon as the account is disconnected or deleted;
• Billing data: statutory accounting periods (10 years).

6. Your rights

Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability regarding your data.

• Deleting an artist/professional account: directly from your settings (“Delete my account”) — the profile is anonymised, the photos deleted and the Instagram connection revoked;
• Withdrawing Instagram consent: the “Disconnect” button in your settings, or from your Instagram settings (we then delete the related data);
• For any other right (access, portability, etc.): contact@casabee.fr — reply within one month.

You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

7. Cookies

The website only uses cookies that are strictly necessary for it to work (secure sessions for professional and artist accounts). No advertising or third-party tracking cookie is set.