Bivo Moto Privacy Policy
Last updated: 22 July 2026
1. Purpose of this privacy policy
This privacy policy explains how Bivo Moto collects, uses, retains and protects the personal data of users, motorcycle travelers, contributors and accommodation professionals using the bivomoto.com website.
It applies in particular to browsing the site, creating and managing an account, using favourites, publishing a review, contacting an accommodation host, subscribing to the newsletter, recommending an establishment, requesting a destination, and requests for professional listing (Bivo Pro).
Bivo Moto processes data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
2. Data controller
Guillaume Grandclement
Private individual operating the Bivo Moto website
Contact: contact@bivomoto.com
3. Personal data collected
Depending on the features used, Bivo Moto may process the following categories of data.
Account and profile
email address, password (hashed, never accessible in plain text), display name, technical identifier, account creation and last login dates, favourites, published reviews, newsletter preference. When signing in with Google, Bivo Moto receives the name, email address, a technical identifier and, where applicable, the URL of the profile photo (stored in the account metadata, neither displayed nor used by Bivo Moto). Bivo Moto never receives the Google account password.
Communication and contributions
depending on the form used, name, email address, message content, and information relating to the establishment concerned (contacting a host, general contact, reviews, recommendations, destination requests, Bivo Pro requests). When a host is contacted, their contact details and the message are forwarded to them so they can reply; Bivo Moto does not process any payment or banking data. Once a review is approved, the display name, rating and comment are published on the relevant listing.
Newsletter
email address, date and source of consent, subscription or unsubscription status, data required for delivery. Open and click tracking is configured in anonymous mode in Brevo: statistics remain aggregated and are not associated with an identified contact.
Use of the service
for a logged-in user, favourites, booking clicks, opening the host contact form, viewing the phone number, revealing a partner bonus. Hosts only receive aggregated statistics, never the identity of the users concerned.
Browsing
IP address, browser type, pages viewed, technical logs required for the operation and security of the site. With consent, Google Analytics also processes audience measurement data (pages, duration, traffic source, approximate geographic area). No name, email or Bivo account identifier is ever transmitted to Google Analytics.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Managing the account, favourites, reviews | Performance of the requested service |
| Contacting a host or Bivo Moto | Performance of the requested service, or legitimate interest in responding to the request, depending on the case |
| Recommendations, destination requests | Legitimate interest in developing the service |
| Professional listing requests | Pre-contractual measures at the prospect's request |
| Presenting Bivo Moto to accommodation professionals | Legitimate interest, where the outreach relates to their professional activity |
| Newsletter | Consent |
| Audience measurement (Google Analytics) | Consent |
| Review moderation, security, abuse prevention, aggregated statistics | Bivo Moto's legitimate interest |
| Accounting and legal obligations (where applicable) | Legal obligation |
Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
5. Recipients and service providers
Depending on the feature used, data may be accessible to Guillaume Grandclement, to the selected accommodation (only when a message is sent to them), and to the following service providers:
| Provider | Role |
|---|---|
| Supabase | Database, authentication, storage, hosted in the eu-west-1 European region (Ireland) |
| Vercel | Application hosting |
| Resend | Transactional emails (confirmations, notifications) |
| Brevo | Newsletter and marketing campaigns. Open/click tracking is configured in anonymous mode: statistics remain aggregated and are not associated with an identified contact |
| Sign-in (OAuth) and audience measurement (Analytics, after consent) |
Bivo Moto never sells or rents personal data to third parties, and does not pass it on to hosts for independent prospecting purposes.
6. Transfers outside the European Economic Area
The main data is hosted within the European Union (Ireland). Some providers or their sub-processors may be established outside the EEA; such transfers are then governed by the mechanisms provided for under the GDPR (adequacy decision, standard contractual clauses).
7. Retention periods
| Category | Duration |
|---|---|
| Account, profile, favourites | 2 years without login (warning at 23 months, then review before deletion) |
| Clicks linked to an account | 14 months, then automatic anonymisation |
| Reviews | As long as published; anonymised upon account deletion, or on simple request |
| Messages (hosts, general contact) | 2 years after the last exchange, then review before deletion |
| Recommendations, destination requests | 12 months, then automatic anonymisation of the contributor |
| Prospects and professional listing requests | 3 years from collection or the prospect's last contact, then review before deletion |
| Active partner hosts | For the duration of the relationship with Bivo Moto |
| Newsletter | Until unsubscription, with immediate removal from the mailing list |
| Newsletter opt-out list | At least 3 years, to prevent further solicitation |
| Cookie and Google Analytics choice | 6 months |
| Google Analytics data | 14 months (automatically deleted by Google) |
| Technical logs | For as long as necessary for the operation and security of the service, according to each provider's retention settings |
8. Security
Secure connections (HTTPS), hashed passwords, security rules limiting data access at the level of each database table, separation of user and administrator rights, systematic verification of permissions before any sensitive administrative action.
As no internet-connected system can guarantee absolute security, these measures are regularly reviewed.
9. Cookies and Google Analytics
Strictly necessary cookies (session, security) do not require consent. Google Analytics is only loaded after explicit acceptance via the banner shown on first visit; in case of refusal, no data is sent to Google.
The "Manage my cookies" link, at the bottom of every page, lets you view, change or withdraw your choice at any time. The choice is kept for 6 months, after which consent is requested again.
10. Your rights
You have the right to access, rectify, erase, restrict, object to processing, and to data portability, as well as the right to withdraw your consent at any time.
To exercise these rights, write to contact@bivomoto.com. Bivo Moto responds within one month, which may be extended by two months for complex requests.
The author of a review may request its rectification, deletion, or the anonymisation of their identity, without having to delete their entire account.
11. Automated decisions
Bivo Moto does not make any decision producing legal effects based solely on automated processing.
12. Changes to this policy
Bivo Moto may amend this policy to reflect changes to the site, its service providers, or applicable regulations. The update date appears at the top of this page.
13. Complaints
You may lodge a complaint with the French data protection authority (CNIL), or with the supervisory authority of your country of residence.
14. Contact
Bivo Moto · Guillaume Grandclement