Last updated: 13 September 2026
Patissio (hereinafter “we”, “our” or “the Platform”) is an online platform published by MBEN DEV, a French limited liability company (SARL) with share capital of €1, registered with the Paris Trade and Companies Register under number 932 130 735, whose registered office is at 60 rue François Ier, 75008 Paris, France. It lets artisan pastry chefs create their showcase website, manage their creations, receive orders and offer workshops. This privacy policy describes how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
We collect the following categories of data:
Your data is collected and processed for the following purposes:
When you connect your Instagram account to Patissio, we use the Instagram API (Meta) to fetch and display your feed of public photos on your showcase website.
Payments (subscriptions and transactions) are handled by Stripe, Inc. We store no banking data on our servers. Stripe acts as a GDPR-compliant processor. See Stripe’s privacy policy.
Pastry chefs subscribed to the Pro or Premium plan can connect a conversational assistant (ChatGPT, Claude or any other MCP-compatible client) to their pastry shop. This connection is optional: it only exists if the pastry chef enables it themselves.
Once connected, and depending on the permissions granted, the assistant can view: orders and quote requests — including customers’ contact details —, the catalogue, ingredient and recipe sheets, as well as activity statistics. With the “Act” permission, it can also write a message to the customer on an order and move an order’s status forward.
When you use the built-in assistant, your messages, relevant attachment text and data needed for your request are sent to Microsoft Azure OpenAI, with model processing in the Europe data zone. Access is optional and by invitation. Web search is disabled. Microsoft’s residency commitments include limited exceptions, including security and support; they do not guarantee that no transfer can ever occur. In the test environment, when monitoring is enabled, Langfuse Cloud Europe receives assistant technical metadata (durations, errors, tool names, tokens, costs and pseudonymized identifiers). Messages, responses, files and tool arguments are excluded from this transfer.
Conversations and extracted attachment text are kept so you can return to your exchanges; you can delete a conversation’s content from its history. Original files are not retained after extraction. Usage and payment records are kept separately from conversation content; service keys are never sent to your browser.
Proposed creations and changes require your approval in Patissio. The assistant does not automatically publish a listing or send a customer message or quote. Proposed answers and prices may be inaccurate and must be reviewed.
Your personal data is never sold. It may be shared with:
In accordance with the GDPR, you have the following rights over your personal data:
To exercise these rights, contact us at: [email protected].
We implement appropriate technical and organisational measures to protect your data:
Patissio uses cookies and storage that are strictly necessary for security, authentication, language preferences and remembering your choice; they are active without consent. If you accept Statistics, self-hosted Umami, Google Analytics and Sentry session recordings may measure visits and interactions; sensitive fields are masked. If you accept Marketing, the Snapchat and TikTok pixels may measure page views and advertising campaign conversions, including registrations and subscriptions. Cloudflare Turnstile (abuse protection), Google OAuth, Stripe and Cal.com are loaded only when their feature is necessary or you use it, and may then set their own technical cookies. Crisp is loaded in the back office to display the support bubble and uses a functional cookie to retain the conversation and support session. All optional categories are rejected by default. Your choice is kept for 6 months and can be changed at any time using the “Manage cookies” button.
You can request the complete deletion of your account and all associated data by contacting us at [email protected]. Deletion will be carried out within 30 days, subject to legal retention obligations.
We reserve the right to amend this privacy policy. In the event of a substantial change, we will inform you by email or via a notification on the Platform. The date of the last update is shown at the top of this page.
For any question regarding this privacy policy or your personal data:
We measure traffic on the Platform and on storefronts with Umami, which we host on our own servers. This measurement sets no cookie and writes nothing to your device: your IP address is only used transiently to compute an anonymous session identifier that is renewed every day. Nothing is combined across sites, shared, sold, or used for advertising.
Because it writes no information to your device and serves only our own audience measurement, it falls under the consent exemption for audience measurement. The corresponding data is kept for 13 months at most, then deleted automatically.
You can still opt out at any time, for this browser:
Session recording and heatmaps, which capture the screen, as well as advertising pixels, remain subject to your explicit consent. You can change it at any time via the “Manage cookies” button at the bottom of the page.