Bivo Moto Privacy Policy
Last updated: 11 November 2026
1. Purpose of this privacy policy
This privacy policy explains how Bivo Moto collects, uses, retains and protects the personal data of users, motorcycle travelers and contributors of the bivomoto.com website, as well as of accommodation professionals, whether they use the site, contact Bivo Moto directly (email, phone, in person) or Bivo Moto contacts them through other channels (social media, prospecting).
It applies in particular to browsing the site, creating and managing an account, using favorites, publishing and reporting a review, contacting an accommodation host, subscribing to the newsletter, recommending an establishment, requesting a destination, requests for professional listing and the commercial follow-up of accommodation professionals (Bivo Moto Pro).
Bivo Moto processes data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
2. Data controller
Guillaume Grandclement
Sole proprietor (entrepreneur individuel, EI) trading as Bivo Moto and operating the bivomoto.com website · 47 rue Vivienne, 75002 Paris, France · RCS Paris 131 714 172 (Paris Trade and Companies Register)
Contact: contact@bivomoto.com
3. Personal data collected
Depending on the features used, Bivo Moto may process the following categories of data.
Account and profile
email address, password (hashed, never accessible in plain text), display name, technical identifier, account creation and last login dates, favorites, published reviews, newsletter preference and, where applicable, the suspension of the ability to post reviews, with its date and reason. When signing in with Google, Bivo Moto receives the name, email address, a technical identifier and, where applicable, the URL of the profile photo (stored in the account metadata, neither displayed nor used by Bivo Moto). When signing in with Apple, Bivo Moto receives a technical identifier, the chosen email address, which may be an Apple relay address that forwards emails to the real one without revealing it, and, at the first sign-in only, the name. Bivo Moto also keeps, for as long as the account exists, the sign-in token issued by Apple: it is used only to withdraw, at Apple, the authorization given to Bivo Moto when the account is deleted, and it is erased with the account. Bivo Moto never receives the Google or Apple account password.
Communication and contributions
depending on the form used, name, email address, message content, and information relating to the establishment concerned (contacting a host, general contact, reviews, reporting a review, recommendations, destination requests, Bivo Moto Pro requests); for a Bivo Moto Pro request, the country of the property, the phone number and, if any, the SIRET number are added; for a review report, the reason, any details, the declaration of good faith, the language of the page and, if given, the name and email address of the person reporting, or their account if they are logged in, with no IP address. When a host is contacted, their contact details and the message are forwarded to them so they can reply; Bivo Moto does not process booking payments or any banking data. Once a review is approved, the display name, rating and comment are published on the relevant listing, and may be featured on the homepage. When a review is rejected, its reason and the details given to its author are kept with it in the administration.
Accommodation professionals
for accommodation businesses we reach out to, quote requesters and Bivo Moto Pro partners, whether they used the site, contacted Bivo Moto directly (email, phone, in person) or Bivo Moto contacted them through other channels (social media, prospecting): name and contact details of the establishment and of its manager (email, phone number), type, capacity, parking, SIRET number, history of exchanges (calls, emails, notes), quotes and, for a partner, the dates and amounts of their payments, their listing going live and their subscription. Online payment is handled by Stripe: Bivo Moto never receives card or bank account details.
Newsletter
email address, date and source of consent, subscription or unsubscription status, data required for delivery. Open and click tracking is configured in anonymous mode in Brevo: statistics remain aggregated and are not associated with an identified contact.
Use of the service
for a logged-in user, favorites, booking clicks, opening the host contact form, viewing the phone number, revealing a partner bonus. Hosts only receive aggregated statistics, never the identity of the users concerned.
Browsing
IP address, browser type, pages viewed, technical logs required for the operation and security of the site. To measure audience, Vercel Web Analytics also records, for each page viewed, the page address without its parameters, the date and time, the site the visit comes from, the country, region and city of the connection, the browser, the operating system and the device type (see section 9). No name, email or Bivo Moto account identifier is ever sent to Vercel Web Analytics.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Managing the account, favorites, reviews | Performance of the requested service |
| Contacting a host or Bivo Moto | Performance of the requested service, or legitimate interest in responding to the request, depending on the case |
| Recommendations, destination requests | Legitimate interest in developing the service |
| Professional listing requests | Pre-contractual measures at the prospect's request |
| Presenting Bivo Moto to accommodation professionals | Legitimate interest, where the outreach relates to their professional activity |
| Managing a Bivo Moto Pro partner's subscription (payment, going live, renewal) | Performance of the contract |
| Newsletter | Consent |
| Audience measurement (Vercel Web Analytics) | Bivo Moto's legitimate interest in knowing how its site is visited; you may object at any time (section 9) |
| Review moderation, security, abuse prevention, aggregated statistics | Bivo Moto's legitimate interest |
| Handling review reports, and informing the person reporting and the author of the review of the decision | Legal obligation (EU Digital Services Act) |
| Accounting and legal obligations (where applicable) | Legal obligation |
Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
5. Recipients and service providers
Depending on the feature used, data may be accessible to Guillaume Grandclement, to the selected accommodation (only when a message is sent to them), and to the following service providers:
| Provider | Role |
|---|---|
| Supabase | Database, authentication, storage, hosted in the eu-west-1 European region (Ireland) |
| Vercel | Application hosting and audience measurement (Vercel Web Analytics). Vercel Inc. (United States), processor |
| Resend | Transactional emails (confirmations, notifications) |
| Brevo | Newsletter and marketing campaigns. Open/click tracking is configured in anonymous mode: statistics remain aggregated and are not associated with an identified contact |
| Sign-in with a Google account (OAuth) | |
| Apple | Sign-in with an Apple Account (Sign in with Apple), and Apple's relay, which forwards emails sent to a hidden address to the real one |
| OpenStreetMap | Map backgrounds on results pages and listings, and the address search of the weather in the account area. To display the map, your browser requests its images from the servers of the OpenStreetMap Foundation (United Kingdom), which therefore receive your IP address; these images are delivered through a global network. No cookie is set. The Foundation processes this data on its own behalf |
| Open-Meteo | Weather forecasts in the account area. To display them, your browser queries the Open-Meteo service (OpenMeteo GmbH, Switzerland), which therefore receives your IP address and the coordinates of the place searched; its logs are deleted after 90 days. No cookie is set. Open-Meteo processes this data on its own behalf |
| Google Workspace | Business email (Gmail): emails exchanged with accommodation professionals. Google Cloud France (Paris), processor; data may be processed in any country where Google or its sub-processors have facilities |
| snov.io | Email prospecting to accommodation professionals. Snovio Inc. (New York, United States), processor; data stored with Amazon, MongoDB and Hetzner |
| Abby | Quotes and invoicing for Bivo Moto Pro subscriptions. Abby SAS (Nancy, France), processor; data hosted in France |
| Stripe | Online payment of Bivo Moto Pro subscriptions; Bivo Moto never receives card or bank account details. Stripe Payments Europe (Ireland), processor for the payment, and controller for its own purposes (fraud prevention, legal obligations including anti-money laundering) |
Bivo Moto never sells or rents personal data to third parties, and does not pass it on to hosts for independent prospecting purposes.
6. Transfers outside the European Economic Area
The main data is hosted within the European Union (Ireland). Some providers or their sub-processors may be established outside the EEA; such transfers are then governed by the mechanisms provided for under the GDPR (adequacy decision, standard contractual clauses). This applies to audience measurement data, which may be processed by Vercel Inc. in the United States: Vercel Inc. is certified under the EU-U.S. Data Privacy Framework, recognized by an adequacy decision of the European Commission.
7. Retention periods
| Category | Duration |
|---|---|
| Account, profile, favorites | 2 years without login (warning beforehand, then review before deletion) |
| Record of an account deletion (email address, date, steps carried out) | Five years after the deletion |
| Clicks linked to an account | 14 months, then anonymization |
| Reviews | As long as published; anonymized upon account deletion, or on simple request |
| Rejected reviews | 12 months after rejection, then deletion |
| Review reports | 12 months after they have been handled, then deletion; the name and email address of the person reporting are erased earlier if they delete their account, or on simple request |
| Suspension of review posting | Until it is lifted, or until the account is deleted |
| Messages (hosts, general contact) | 2 years after the last exchange, then review before deletion |
| Recommendations, destination requests | 12 months, then anonymization of the contributor |
| Prospects and professional listing requests | 3 years from collection or the prospect's last contact, then review before deletion |
| Active partner hosts | For the duration of the relationship with Bivo Moto |
| Former partner hosts | 3 years after the end of the subscription or the last contact if later, then review before deletion; invoices, 10 years |
| Newsletter | Until unsubscription, with immediate removal from the mailing list |
| Newsletter or prospecting opt-out list | At least 3 years, to prevent further solicitation, unless you delete your account, in which case it is erased along with the account |
| Audience measurement opt-out | Kept in your browser until you cancel it or clear the site's data |
| Audience measurement data (Vercel Web Analytics) | Available to Bivo Moto for 12 months; Vercel states that it may keep them longer, without announcing a maximum duration |
| Technical logs | For as long as necessary for the operation and security of the service, according to each provider's retention settings |
Anonymized data may be kept for statistical purposes.
8. Security
Secure connections (HTTPS), hashed passwords, security rules limiting data access at the level of each database table, separation of user and administrator rights, systematic verification of permissions before any sensitive administrative action.
As no internet-connected system can guarantee absolute security, these measures are regularly reviewed.
9. Cookies and audience measurement
The site only sets strictly necessary cookies, which do not require consent: the sign-in session, and two cookies holding no data about you. The "bivo_tirage" cookie only holds a randomly drawn number: it keeps, for the length of your browsing session, the random order in which establishments are shown to you, so that each has the same chance of being seen, and disappears when the session ends. The "NEXT_LOCALE" cookie remembers the language of the page viewed, and likewise disappears when the session ends. For the life of a tab, the site also keeps in your browser what the back button needs, and what lets a listing's view be counted only once.
Audience measurement is provided by Vercel Web Analytics, without cookies. To count visitors, Vercel computes from each visit a fingerprint that is reset every day: it cannot follow you from one day to the next, or from one site to another. Bivo Moto only receives aggregated statistics from it. Measurement does not apply to administration pages.
You can object to this measurement at any time, with the button below or with the "Audience measurement" link at the bottom of every page. Your choice is kept in your browser's local storage, without a cookie: as long as it is there, none of your visits is sent to Vercel Web Analytics. It applies to this browser, and disappears if you clear the site's data.
10. Your rights
You have the right to access, rectify, erase, restrict, object to processing, and to data portability, as well as the right to withdraw your consent at any time. You can delete your account yourself from its settings: the “Delete your Bivo Moto account” page explains what is deleted and what is kept.
To exercise these rights, write to contact@bivomoto.com. Bivo Moto responds within one month, which may be extended by two months for complex requests.
The author of a review may request its rectification, deletion, or the anonymization of their identity, without having to delete their entire account.
11. Automated decisions
Bivo Moto does not make any decision producing legal effects based solely on automated processing.
12. Changes to this policy
Bivo Moto may amend this policy to reflect changes to the site, its service providers, or applicable regulations. The update date appears at the top of this page.
13. Complaints
You may lodge a complaint with the French data protection authority (CNIL), or with the supervisory authority of your country of residence.
14. Contact
Bivo Moto · Guillaume Grandclement