Colors ClubsPrivacy Policy
Last updated: 11 September 2026
Archived version (2026-09-10). This text applied until 9 October 2026 inclusive to accounts that had accepted it. The version in force is here; the summary of changes is here.
English translation, provided for convenience. The French version (Politique de confidentialité) is the only binding text. In the event of any discrepancy, the French version prevails.
This policy describes how NEXA G GROUP (“we”) collects and processes your personal data in connection with the Colors Clubs Services, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable law.
1. Controller
NEXA G GROUP (SARL with share capital of €1,000, Nanterre Trade Register 990 672 818, registered office: 32 rue de Paris, 92100 Boulogne-Billancourt, France), reachable at [email protected]. See our legal notice.
2. Data collected
- Identity & account: last name, first name, email, phone, language, country, role(s).
- Verification (KYC) for drivers/managers: identity document, vehicle documents, company information (registration number, licence).
- Location: real-time position while in use (search, ride tracking, driver going online). For professionals using the Colors Pro and Colors Pro Lite applications, and only when they declare themselves online, position continues to be recorded even when the app is closed: this is what makes it possible to send them nearby rides and to show the customer the vehicle approaching. Recording stops as soon as they go offline, and the professional may refuse or revoke it at any time in their phone settings — they then no longer receive rides while offline. No position is recorded in the background in the passenger applications or in Colors Manager.
- Transactions: rides, amounts, payment methods (handled by our providers — we do not store card numbers), Merhcure, Colors Arts.
- Content: messages, reviews, any photos.
- Technical: device identifiers, notification tokens, logs, connection data.
3. Purposes & legal bases
| Purpose | Legal basis |
|---|---|
| Providing the Services (matching, rides, payments) | Performance of the contract |
| Identity verification and compliance | Legal obligation / legitimate interest |
| Location for dispatch and tracking | Performance of the contract |
| Security, fraud prevention | Legitimate interest |
| Service notifications | Performance of the contract |
| Marketing communications | Consent |
| Improvement & statistics | Legitimate interest |
| Advertising and advertising identifier (optional viewing) | Consent |
4. Recipients
Your data is accessible, strictly as necessary, to: our authorised teams; the club and driver involved in a ride (contact and trip data needed for the service); our technical processors — Supabase (database, authentication, storage), Stripe and regional payment providers, a notification delivery provider (Firebase Cloud Messaging / APNs), and an infrastructure host. We do not sell your data.
5. Transfers outside the EU
Some processors may handle data outside the European Union. These transfers are covered by appropriate safeguards (European Commission standard contractual clauses or equivalent mechanisms).
6. Retention periods
Account data is kept for the duration of the relationship, then archived in line with legal obligations (accounting, tax, anti-fraud). KYC documents are kept in accordance with applicable regulations. Location data linked to a ride is kept for as long as necessary for the service and for evidence.
7. Your rights
You have the rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent. To exercise them: [email protected]. You may lodge a complaint with the CNIL (or with the supervisory authority of your country).
Deleting your account. Deletion is requested directly from the application — My account → Settings → Delete my account — with no justification and no charge. A 14-day withdrawal period then begins: you are signed out immediately, but the request can be cancelled during that period by signing back in. The full procedure, together with what is erased and what the law requires us to keep, is set out on the Delete my account page.
8. Advertising
The Colors Clubs, Colors Pro and Colors Manager applications may display advertising supplied by Google AdMob. Viewing is optional: it is offered in exchange for Merhcure or in-game benefits, and nothing in the Services depends on it.
On that occasion, Google may read your device's advertising identifier and technical data (device type, system, approximate geographic area) to select and measure ads. We do not pass on to Google your name, your email, your number or your precise location.
You stay in control: on iOS, the application asks for your permission before any tracking and refusing entails no loss of service; on Android, you can delete or reset your advertising identifier in the device's Google settings. The Colors Clubs Signature and Colors Pro Lite applications display no advertising.
9. Security
We implement appropriate technical and organisational measures: encryption in transit, access control (Row Level Security), separation of payment data (handled by the PSPs), and payment operations through secure server-side calls.
10. Minors
The Services are not intended for people below the required legal age. We do not knowingly collect data from unauthorised minors.
11. Cookies
The website uses cookies and trackers described in our Cookie Policy.