Controller and contact
Rivière Advisory, SIRET 10271587700019, 21 Rue de la Faisanderie, 75016 Paris, France, operates the platform. Privacy requests: contact@riviereadvisory.com. Course support: hello@frenchpropertyplaybook.com. Paddle handles payment information under its own applicable merchant-of-record responsibilities and privacy notice.
Account and service information
We process email addresses, account identifiers, course entitlements, membership dates and payment/refund references to deliver and support the contracted service. Authentication and operational records help secure access. Support correspondence is used to handle your request; statutory privacy and consumer requests also involve legal obligations. Earlier newsletter subscriptions remain within their consented scope and can be withdrawn. Essential account and billing messages are separate from marketing consent.
Purposes and legal bases
We rely on performance of the contract, or steps you request before entering it, to provide account access, course delivery, membership tools, saved projects, private lesson notes, completion status, the most recent lesson visit and requested calculations and ordinary service support. We rely on legal obligations when handling statutory rights requests and retaining records that the law requires. We rely on our legitimate interests in securing the service, preventing fraud and protecting licensed content for proportionate security logs and download-abuse controls, subject to your rights and interests. Separately subscribed marketing relies on consent, which you may withdraw at any time. We do not use financial scenario inputs to make decisions about your eligibility for credit or other financial services.
Calculators and saved projects
The public purchase estimator calculates in your browser. Member workspace inputs, financial assumptions, outputs and revision history can be submitted for server-side calculation and comparison as well as saved to your account, to provide the service you request. Do not put third-party personal information or sensitive documents in project names. Calculator outputs are educational scenarios, not automated lending or investment decisions.
Download protection
Delivered PDFs carry a random personal-use licence identifier that we can associate with your account, rather than your email or account UUID. Rate-limit records contain an account-linked balance/refill time and capped cooldown-event count/latest time. We use these measures to protect personal-use materials against automated bulk downloading. They do not determine refund eligibility. The limiter table does not record document titles, IP addresses or scenario inputs; separate hosting/security logs can contain network information.
Providers
Supabase provides authentication, account, entitlement, workspace and download-protection storage. Bunny.net Stream hosts and delivers protected videos, receiving browser/network information when you load its player. Vercel hosts the website and APIs and processes operational/security requests. Brevo delivers authentication and transactional emails and manages separately consented marketing lists where enabled. Paddle handles checkout, billing, subscriptions, refunds and related records. We do not store full card details. These providers have different legal roles.
Processing locations and transfers
Our Supabase production database is hosted in Ireland. Our member-platform APIs currently run in Vercel’s US East region (Northern Virginia); requests can therefore be processed in the United States even though the database is in Europe. Bunny delivers video through a global content-delivery network. Brevo states that its database hosting is in France, Germany and Belgium. These storage locations do not limit all provider support, security or subprocessors to those countries.
Supabase and Vercel’s data-processing terms provide contractual safeguards for applicable international transfers, including standard contractual clauses. Paddle describes its own international transfers and safeguards in its privacy notice. You may request information about the safeguards relevant to your data, and copies where applicable, from contact@riviereadvisory.com.
Provider information: Supabase data-processing terms; Vercel data-processing terms; Bunny data protection; Brevo storage locations; Paddle privacy notice.
Retention and deletion
Course-access records, saved projects, private lesson notes and learning progress are retained while purchased-version access continues. Membership expiry alone does not delete your projects or learning records. You can edit or clear individual lesson notes within the course, and request an export or deletion of your learning records through our privacy contact. Lesson notes are associated with your account and are not published to other members. The founder manually reviews routine support correspondence for deletion 24 months after closure and stale download-abuse metadata after 90 days; these are review thresholds, not automatic deletion deadlines. Account-linked licence records support personal-use attribution while account access continues; the implemented licence/limiter row is removed when the authentication account is deleted. Deletion does not recall downloaded copies or instantly remove provider backups. Records required for legal obligations or an actual dispute may need separate retention; we explain applicable exceptions when responding to a request. The founder initially handles monthly retention reviews and privacy requests.
Provider logs and backups
Our Brevo account currently specifies one month for transactional email logs and is set not to retain previews of new transactional emails. Earlier previews, if any, are not removed by that setting. Brevo says deletion may take up to 24 hours after the retention period ends. Delivery records are distinct from correspondence you send to our support inbox.
Supabase provides daily database backups; the current Pro plan provides access to the last seven days. Removing information from the active database does not instantly remove it from an existing backup. Vercel’s current plan provides one hour of runtime-log history, but that is not a deletion deadline for every category of security, billing or service-generated data. Paddle retains its payment-related records according to the ongoing relationship, legal obligations, applicable limitation periods and disputes described in its own notice.
Browser storage, videos and checkout
The member application keeps sign-in sessions in browser storage. A local timestamp limits repeated sign-in requests and is not automatically erased when that cooldown ends. The enrollment flow temporarily keeps the requested email in session storage and clears it after successful completion or sign-out. Member-page fonts are served by our own site. The Bunny player loads only after you select Load video; browser/network information may be transmitted at that point, before Play. Loading video is not blanket consent to optional tracking. The checkout page loads Paddle’s payment software when you visit it, before you open a payment form. This software also contacts Paddle’s ProfitWell/Retain service. Video and payment providers may use their own storage and request technologies; opening a checkout or loading a video is not consent to unrelated advertising or optional tracking. You can remove stored site data in your browser settings; removing sign-in storage will sign you out.
Your rights
Where applicable, you may request access, correction, erasure, restriction, portability, object to processing, or withdraw consent without affecting prior lawful processing. Contact contact@riviereadvisory.com. We respond within one month, explaining any permitted extension within that period; identity checks must be proportionate. You may complain to the CNIL or another competent supervisory authority. Material changes will be communicated as appropriate.