Back home

Privacy policy

Last updated: August 20, 2026

Karven is a trust infrastructure for the events industry: verified identities, certified contracts, commitments that hold up. That trust starts with how we handle your data. This page explains, without unnecessary jargon, what we collect, why, who it's shared with, and how you stay in control.

Data controller

Your data is processed by Karven Network, represented by Anthony Prouvost, founder. For any question about this policy or your data, contact us at admin@karvennetwork.com.

The data we collect

We only collect what is necessary to run the platform: verifying who you are, securing your contracts, and keeping the trust network alive.

Account and identity

Name, email, password (or Google identifier), profile photo, preferred language, city, role (promoter, artist, provider, venue).

Identity and business verification

ID document and selfie submitted to Stripe Identity during KYC verification, company registration number (SIRET) and associated business data retrieved via Pappers.

Contracts and signatures

Content of contracts created on the platform, e-signature status, history of exchanges tied to a contract, data transmitted to Yousign/Youtrust for the signature ceremony.

Reputation and reviews

Ratings left by your partners after a collaboration, comments, replies to reviews, automatically calculated reputation score.

Banking data

No banking data ever passes through our servers. Identity verifications that go through Stripe are processed directly by Stripe under its own privacy policy. Settlements between users do not go through Karven and are not reported to us.

Technical data

IP address, browser type, session and language-preference cookies, technical logs used for security and diagnostics.

Why we use this data

Create and manage your account

Authentication, personalising your workspace, communication related to your account.

Verify your identity and business

Ensure every profile on Karven matches a real person and a real company. That is the core of our trust promise.

Create, sign, and archive your contracts

Generate documents, route them for e-signature, keep enforceable proof in case of a dispute.

Build and display your reputation

Let other members review a verifiable track record before engaging with you.

Send you the emails you need

Account confirmation, signature notifications, review alerts. Never marketing without your consent.

Improve and secure the platform

Diagnose incidents, build new features, prevent fraud and abuse.

The Network: what's public

Karven rests on a simple principle: reputation only counts if others can verify it. That's why some information from your profile is publicly visible and searchable on the site, without requiring anyone to sign in.

Public

Public: your name, your role, your company name, your verification badges (identity, company), your reputation score, the number of collaborations completed, and reviews left by your partners.

Private

Always strictly private, never shown publicly: your email, your phone number, your detailed SIRET, your identity documents, the content of your contracts, and any payment data.

Legal basis for processing

We process your data on the basis of contract performance (delivering the service), our legitimate interest (security, product improvement, fraud prevention), and, where the law requires it, your explicit consent (for example, for identity verification).

Who your data is shared with

We never sell any data. Some data is shared with technical providers, only to the extent necessary for the service they provide us:

SupabaseDatabase hosting and authentication (European Union).
VercelApplication hosting.
StripeIdentity verification (Stripe Identity).
Yousign / YoutrustElectronic signature of contracts.
PappersVerification of company data via the SIRET number.
ResendSending transactional emails (confirmation, notifications).
GoogleSign-in via Google (OAuth), if you choose that sign-in method.

Transfers outside the European Union

Some of our providers (Stripe, Google, Vercel) may process data outside the European Union. In that case, these transfers are governed by standard contractual clauses or an adequacy mechanism recognised by the European Commission.

Retention period

Your data is kept as long as your account is active. If your account is deleted, identifying data is erased within 30 days, except for documents we must keep to meet our legal and accounting obligations (contracts and invoices in particular, kept for 10 years under French commercial law).

Security

All communications are encrypted (HTTPS). Passwords are hashed and never stored in plain text. Access to the production database is restricted and logged. API keys and application secrets are stored encrypted at our hosting provider.

Your rights

Under the GDPR, you have the following rights over your data:

Right of access

Obtain a copy of the data we hold about you.

Right to rectification

Correct inaccurate or incomplete data.

Right to erasure

Request deletion of your account and your data.

Right to object and restrict

Object to certain processing or request that it be restricted.

Right to portability

Receive your data in a structured, machine-readable format.

Right to lodge a complaint

File a complaint with the CNIL (cnil.fr) if you believe your rights are not being respected.

To exercise any of these rights, contact us at admin@karvennetwork.com. We respond within one month at most.

Cookies

We only use strictly necessary cookies: keeping you signed in and remembering your preferred language. No advertising or third-party tracking cookies are used.

Minors

Karven is intended for professional use and is not designed for people under 18.

Changes to this policy

This policy may evolve along with the service. Any substantial change will be notified to you by email or via a notification on the platform.