Privacy Policy

1. Who we are

Wine Sphere (www.wine-sphere.com) is published by Mateo Chinese (see Legal Notice), who acts as data controller. You can reach us through the contact form.

2. Data we collect

• Account data: email address, password (hashed, never readable by us), role (candidate or recruiter), name.
• Profile data (provided by you): photo, headline, bio, skills, languages, country, CV, company information for recruiters.
• Activity data: job offers, applications, messages, availability cards, community posts, saved jobs, job alerts.
• Technical data: server logs (IP address, timestamps) kept for security purposes.

We do not collect any data from third-party sources, and we never sell your data.

3. Why we process it

• To provide the service (legal basis: contract) — accounts, applications, messaging, publication of offers.
• To secure and moderate the platform (legitimate interest) — content review, anti-abuse rate limits, access logs for CVs.
• To notify you (contract / consent) — transactional emails (account confirmation, application updates, messages). You can disable optional notifications in Settings.

4. Who can see your data

• Your public profile (name, headline, country, skills) is visible to other users according to platform rules.
• Your CV is private: it is only accessible to you, to recruiters whose offers you applied to, and to the administrator. CV files are stored in a private bucket and served through expiring signed links; every recruiter access is logged.
• Availability cards are visible after moderation, if you choose to publish one.

5. Processors

We use the following processors, bound by data processing agreements:

• Supabase — database, authentication and file storage, hosted in the European Union (AWS eu-west-3, Paris, France).
• Vercel — application hosting and content delivery (USA, EU Standard Contractual Clauses).
• Resend — transactional email delivery (USA, EU Standard Contractual Clauses).
• Stripe — payment processing for future recruiter plans (no card data ever touches our servers).

6. Retention and deletion

Your data is kept as long as your account exists. You can delete your account at any time from Settings: your profile, applications, messages, offers, uploaded files and all related data are permanently erased immediately. Security logs are kept for a limited time.

7. Your rights (GDPR)

You have the right to access, rectify, erase and port your data, and to object to or restrict its processing. Most of these rights can be exercised directly: edit your profile, manage notifications or delete your account in Settings. For anything else, use the contact form. You may also lodge a complaint with your supervisory authority (in France: the CNIL, www.cnil.fr).

8. Cookies

Wine Sphere only uses cookies that are strictly necessary to operate the service: authentication session cookies (Supabase). We use no advertising, analytics or tracking cookies — which is why there is no cookie banner.

9. Security

Data is protected by encryption in transit, row-level security on every database table, private storage buckets with signed URLs, and server-side rate limiting. Despite our efforts, no system is perfectly secure; we will notify affected users and the supervisory authority in case of a breach, as required by law.

10. Changes

We may update this policy. Significant changes will be announced on the platform. The date at the top indicates the latest revision.