Back to home

    Last updated: January 2026

    Privacy Policy

    Mell Invest LLC — 131 Continental Dr, Suite 305, Newark, DE 19713, USA

    Identity of the Data Controller

    The data controller is Mell Invest LLC, a company incorporated in the State of Delaware, USA, with its registered office at 131 Continental Dr, Suite 305, Newark, DE 19713, USA, publisher of the "Satiscus" platform. For any question regarding your personal data: contact@satiscus.com.

    Roles and Responsibilities (GDPR / CCPA)

    Under data protection laws (EU GDPR, California CCPA and equivalent): Mell Invest LLC is 'Data Controller' regarding data of its professional Clients (establishment managers registered on the platform). Mell Invest LLC is 'Data Processor' regarding End User data (people scanning QR codes). The professional Client remains the Data Controller of such data.

    Data Collected

    Client Data (Managers): name, email, establishment name, encrypted password, country, billing data (securely managed by our partner Stripe — we NEVER store credit card numbers). End User Data: rating (1-5 stars), review content, phone number (only if voluntarily provided for the giveaway or to be contacted), anonymized browsing data (local device fingerprint to prevent spam). Technical data: truncated IP address, user-agent, for security and fraud prevention purposes. Payment Data: Satiscus does not collect or store any credit card numbers. Card payments are processed by Stripe (PCI-DSS certified). For Clients located in Algeria, payments (Subscriptions and Tips) and data relating to local banking details (RIB/RIP) are processed exclusively and securely by our partner Slick Pay, via its certified API and infrastructure (Satim/CIB).

    Purposes and Legal Bases

    Contract performance: providing the review management service and dashboard. Legitimate interest: fraud prevention, platform security, service improvement. Consent: SMS verification (OTP) via Twilio, giveaway participation. Legal obligation: retention of invoices and accounting data (10 years EU, 7 years USA). AI-generated analytical reports (Google Gemini) on anonymized data.

    Payment Data (PCI-DSS)

    All payments are exclusively processed by Stripe, Inc., a PCI-DSS Level 1 certified payment service provider (highest industry certification). Mell Invest LLC NEVER directly collects, stores or processes credit card numbers, CVV or expiration dates. Payment data is transmitted under TLS 1.3 encryption directly between your browser and Stripe servers. Learn more: https://stripe.com/privacy.

    Hosting and Security

    Database and authentication: hosted and secured by Supabase (AES-256 encryption at rest, TLS in transit, bcrypt-hashed passwords). Server infrastructure: deployed on OVHcloud, a European host certified ISO/IEC 27001, ISO 27017, ISO 27018 and HDS. Daily encrypted backups. Two-factor authentication available. Your data is NEVER resold to data brokers or third parties for advertising purposes.

    Sub-processors and International Transfers

    Full list of our sub-processors: • Stripe, Inc. (Secure payments and tip payouts, USA — EU Standard Contractual Clauses) • Slick Pay (Localized payment processor, Algeria) • Supabase Inc. (Databases and Authentication, USA/EU — SCC) • OVHcloud (Hosting, France/EU) • Twilio Inc. (SMS, USA — SCC) • Google LLC / Gemini (AI Analytics, USA — SCC) All transfers outside the EU are governed by the European Commission's Standard Contractual Clauses (Decision 2021/914) ensuring a level of protection equivalent to GDPR.

    Retention Period

    Client accounts: subscription duration + 3 years after last login. Billing data: 10 years (accounting obligation). End User reviews and comments: Client subscription duration + 1 year. Phone numbers (giveaway): giveaway duration + 30 days. Security logs: 12 months max. Anonymized data for statistics: unlimited.

    Your Rights (GDPR, CCPA, others)

    You have the following rights: access, rectification, erasure ('right to be forgotten'), restriction, portability, objection, withdrawal of consent at any time, right not to be subject to automated decision-making. California residents (CCPA): right to know, delete, correct and not be discriminated against. To exercise your rights: contact@satiscus.com. Response within 30 days. You may also lodge a complaint with the CNIL (France), your national protection authority, or the California Attorney General.

    Cookies and Trackers

    We only use strictly necessary cookies (authentication, session, security, language preference). No advertising or third-party tracking cookies are placed. Stripe may set its own cookies for fraud prevention during payment (policy: https://stripe.com/cookies-policy/legal).

    Minors

    Satiscus is strictly reserved for adult professionals (18+). We do not knowingly collect data concerning minors under 16. If you believe a minor has provided us with data, contact us immediately for deletion.

    Policy Changes

    We reserve the right to modify this policy at any time. In case of substantial modification, Clients will be notified by email at least 30 days before entry into force. The applicable version is the one in force on the date of use of the Service.