Privacy Policy
Last updated: June 2026
1. Who we are
ReefOffice is a service of Robin Angelé EI (Robin4consulting), a French micro-entrepreneur (entrepreneur individuel), SIRET 99906226800019. Customer servers are hosted in the European Union on Contabo infrastructure (Germany). Full company details are in our legal notice.
Contact: contact@reefoffice.com
2. What data we collect
When you sign up for ReefOffice, we collect:
- Your email address (required for account creation)
- Your name (optional to create an account)
- Billing and invoicing details — name or company name, address, and (for EU business clients) VAT number — plus card payment via Stripe; we never see your full card details
- Server configuration preferences (plan choice, security settings)
When you visit our website, we use no tracking cookies, analytics scripts, third-party trackers, fingerprinting, or behavioral profiling. Our servers keep minimal security logs that may include IP addresses, used only to protect the service against abuse (our legitimate interest) and kept for a short period — never for tracking or advertising.
The only cookies we ever set are strictly necessary ones — a session cookie that keeps you signed in to your dashboard after login. Under the ePrivacy Directive these are exempt from consent, so we show no cookie banner. The public marketing site sets no cookies at all.
3. How we use your data
We use your data exclusively to:
- Create and manage your ReefOffice account
- Provision and maintain your server
- Send transactional emails (welcome, invoices, service notifications)
- Respond to your support requests
We never sell, rent, or share your data with third parties. Ever.
4. Where your data is stored
All customer data (files, emails, documents) is stored on your own dedicated VPS in the European Union. The ReefOffice control plane (account management, billing) is also hosted in the EU.
Your server data never leaves the EU. Backups are encrypted client-side with Restic before transfer to Hetzner Storage Box in the EU.
5. Data retention
Your account data is retained as long as your subscription is active. When you cancel:
- Your server is securely wiped within 7 days
- Backups are deleted within 30 days
- Your account data is deleted within 90 days
You can request immediate deletion at any time by contacting us.
6. Your rights (GDPR)
Under the GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing of your data
To exercise any of these rights, email privacy@reefoffice.com. We will respond within 30 days.
7. Subprocessors
- Contabo GmbH (Germany) — customer server hosting
- Hetzner (EU) — encrypted off-site backup storage
- Stripe (EU/US) — payment processing, PCI-DSS Level 1
- o2switch (France) — email hosting and transactional email delivery
8. Changes to this policy
We will notify you by email of any material changes to this privacy policy at least 30 days before they take effect.