findloop ("we") operates a lost & found platform connecting owners, individual finders and partner establishments. This policy explains, in accordance with the GDPR, what data we process and why.
Findloop SAS, a simplified joint-stock company (SAS) — Registered office: 58 rue de Monceau, 75008 Paris, France (SIRET 10960050200016, 109 600 502 R.C.S. Paris, VAT FR36109600502) — is the controller of your personal data. For any question about your data or to exercise your rights: contact@findloop.io.
When you declare a loss or post a listing, we collect your name, email, phone, country, the item description, the place and date of loss, any reward and the photos you add.
When you report a found item, we collect your name, email, phone, and the item description and photos.
For partner establishments: company name, address, city, contact details, logo, subscription and registered items. Team members have an account linked to the establishment.
Your data is used to: match a lost item with a found one (including AI-assisted automated matching), notify you of matches (email/SMS), organise the return, process payments, prevent fraud and improve the service.
We process your data based on the performance of the service (Art. 6.1.b), your consent for notifications and measurement cookies (Art. 6.1.a) and our legitimate interest in securing the platform and preventing abuse (Art. 6.1.f).
This is the core of the service: the finder's and owner's contact details (name, email, phone) are only revealed to the other party AFTER the connection fee is paid, and solely to organise the return or shipment of the item. Using these details for any other purpose is prohibited.
Payments (recovery fees, contact-unlock fees, B2B subscriptions, boosts, shipping) are processed by Stripe. findloop neither stores nor sees your card data. A receipt is emailed to you.
We rely on providers acting on our behalf: Stripe (payments), SendGrid (email), Twilio (SMS), a multimodal AI service for matching (photos/descriptions may be sent to it), EU cloud hosting and OpenStreetMap/Nominatim (place geocoding). No resale of data to third parties.
Our servers are located in the European Union. Some providers may process data outside the EU; where this occurs, appropriate safeguards (standard contractual clauses) govern such transfers.
Declarations: 180 days. Found items & listings: 90 days after closure. In-app notifications: 90 days. Accounts: as long as the account is active. Payment logs and accounting records: per legal obligations. After these periods, data is deleted or anonymised.
You have rights of access, rectification, erasure, restriction, objection and portability. From your "My account" area you can export your data (JSON) and delete your account in one click. You may also write to contact@findloop.io.
Item matching relies on an algorithm (AI) that suggests matches. These suggestions are verified before any return and produce no legal effect on you on their own.
Hashed passwords, encrypted traffic (HTTPS), restricted access and admin action logging: we implement appropriate technical and organisational measures.
We use strictly necessary cookies (session, security, language) and, with your consent, anonymised audience-measurement cookies. See our cookie policy.
You may lodge a complaint with your data protection authority (e.g. the CNIL in France) if you believe your rights are not respected.