Legal information

Privacy Policies

Published on

Last updated: September 15, 2026

This translation is provided for convenience. The French version is the legally binding one and prevails in case of any discrepancy: read it in French.

This policy explains what personal data we process when you use the MyBoost website, the customer account, the Emma assistant or our services, why we process it and what your rights are. It replaces the former separate policies (GDPR, CCPA, PIPEDA, LGPD, APPI): a single document applies, whatever your country.

Who is responsible for your data?

The controller is MyHub Solutions LLC, a limited liability company governed by the laws of Wyoming (United States), which operates the MyBoost brand. Registered office: 33 N Gould St, Sheridan, WY 82801, USA.

For any question or request relating to your data: contact@myboost.fr, subject line "Données personnelles" (Personal data).

MyHub Solutions LLC is not established in the European Union. Requests from individuals located in the European Union may be sent directly to MyHub Solutions LLC at contact@myboost.fr; they are handled under the same conditions and within the same time limits.

This policy covers the website getmyboost.com (also accessible via myboost.fr), the customer account and the Club on myboost.club, the Emma assistant and our communications with you (email, chat, phone).

The data we process

  • Identity and contact details: last name, first name, email address, phone number if you provide it, country.
  • Order: services purchased, amount, currency, date, billing address, order and subscription history.
  • Service delivery information: public username or public link of the account or post to be promoted. We never ask for your social media passwords.
  • Payment: payment status and reference. Card numbers are processed by our payment providers; we have no access to them.
  • Customer account and Club: login credentials, preferences, points or benefits, activity in the customer account.
  • Communications with support and Emma: content of messages, transcripts and, where applicable, call recordings.
  • Affiliate program: affiliate code, attributed sales, commissions, payment details and tax documents of affiliates.
  • Browsing: IP address, device and browser type, pages viewed, traffic source, cookie identifiers (see the Cookies section).
  • Public profile data: when you enter a username, we may display public information about the account (name, photo, follower count) so that you can check it is the right account.

We do not seek to collect sensitive data (health, opinions, etc.). Please do not include any in your messages.

For individuals located in the European Union, the European Economic Area or the United Kingdom, each processing operation is based on one of the grounds set out in article 6 of Regulation (EU) 2016/679 (GDPR).

Purpose Legal basis Retention period
Processing and delivering your orders, managing progressive subscriptions, refills and guarantees Performance of the contract Duration of the relationship, then 5 years in archives for evidence and disputes
Managing your customer account and the Club Performance of the contract Until the account is closed, or 3 years of inactivity
Customer service, order tracking and the Emma assistant (chat, phone) Performance of the contract or pre-contractual measures; legitimate interest (answering requests and improving support) 12 months maximum after the last interaction, unless the exchange relates to an order or a complaint in progress
Recording a call with the phone assistant (if this service is offered) Consent, obtained at the start of the call 6 months maximum
Invoicing and accounting Legal obligation 10 years from the end of the financial year
Marketing emails and offers Consent; for customers, legitimate interest for services similar to those already purchased (you may object at any time) Customers: duration of the relationship + 3 years; prospects: 3 years after collection or the last contact
Inviting you to leave a review after an order, then reading, replying to and displaying a selection of public reviews Legitimate interest (collecting and publishing customer feedback); you may decline the invitation at any time Invitation: 3 years after the order; published reviews: retained by Trustpilot according to its own retention periods
Audience measurement and targeted advertising via cookies Consent Cookies: 13 months maximum; data collected: 25 months maximum
Tracking sales referred by an affiliate (mb_ref cookie, 30 days) Consent 30 days for the cookie; commission data: duration of the program + accounting retention period
Managing the affiliate program (registration, commissions, payments) Performance of the contract; legal obligation (tax) Duration of participation + 5 years; accounting records: 10 years
Fraud prevention, security of the website and the customer account, error detection Legitimate interest Technical logs: 12 months maximum; proven fraud files: 5 years
Handling requests to exercise rights Legal obligation Duration of the request + 5 years
Defending our rights in the event of a dispute Legitimate interest Until the end of the proceedings and the time limits for appeal

When these periods expire, the data is deleted or anonymized.

Emma, our AI assistant

Emma is an assistant powered by artificial intelligence (AI). She introduces herself as such at the start of every conversation, in accordance with article 50 of Regulation (EU) 2024/1689 on artificial intelligence, applicable since August 2, 2026. Emma is not a human; a team member can take over at any time if you ask.

  • Emma uses an AI model provided by Anthropic (Claude). Your messages and, if you are logged in, the relevant information about your order (number, status) are sent to it in order to formulate a reply.
  • Conversations may be retained to handle your request, allow follow-up by a human and improve our support, for the period indicated in the table above.
  • Under the provider's commercial terms, data sent via its API is not used to train its models.
  • Emma provides information and can make mistakes; she does not make any decision producing legal effects concerning you. Refunds, cancellations and complaints are approved by a human.
  • Do not share passwords, banking details or sensitive data with Emma.

If an AI phone assistant is offered, the call begins with a message stating that you are speaking with an AI and specifying whether the call is recorded or transcribed. Recording only takes place after this notice; you may refuse it and ask to speak to a human.

Customer reviews

Customer reviews are posted on Trustpilot. When you write a review, the data you publish in it (displayed name or pseudonym, rating, review text, date, and the information the platform requests to verify the experience, for example an email address or an order reference) is processed by Trustpilot A/S, which is the controller for the review itself: the publication, verification, retention and deletion of the review are governed by its privacy policy and rules, and rights relating to the review are exercised with Trustpilot.

For our part, we process your email address when we invite you to leave a review after an order (legitimate interest; you may object at any time), as well as the public reviews we read, reply to and display a selection of on the website, under the conditions set out in article 18 of the terms of sale. We do not match a review with your customer file in order to make any decision about you, and not leaving a review has no consequence for your order or for the drop-protection guarantee.

Who receives your data?

Your data is accessible only to authorized personnel of MyHub Solutions LLC and to service providers acting on our behalf, to the extent necessary for their tasks and under contract:

  • Shopify: store hosting, cart, secure payment (checkout), order management and consent banner.
  • Payment providers: for example Shopify Payments, PayPal, TagadaPay and, for certain customer account subscriptions, Stripe.
  • Supabase: database and server functions for the myboost.club customer account and the Emma assistant.
  • Anthropic: AI model used by Emma.
  • Email delivery: Klaviyo (marketing emails and forms) and Resend (login emails and transactional emails for the customer account).
  • Technical monitoring: Sentry, to detect errors in the customer account (text entered is masked).
  • Growth service suppliers: they receive only the public username or link and the quantity ordered, never your name, email address or payment data.
  • Public profile data services: third-party APIs queried with the public username entered, to display the account preview.
  • Telephony and sales management: telephony and SMS provider for support or the phone assistant, customer relationship management tool for business quote requests.
  • Audience measurement and advertising, only with your consent: for example Microsoft Clarity, Google (Analytics, Ads), Meta, Pinterest and marketing performance analysis tools connected to the store.
  • Customer reviews: Trustpilot, if you leave a review or are invited to do so.
  • Authorities and advisers: government bodies, courts or authorized authorities where required by law, as well as our advisers (accountants, lawyers), who are bound by confidentiality.

We do not sell your personal data for money.

Transfers outside the European Union

MyHub Solutions LLC is a US company: your data is processed in the United States, and some service providers may process it in other countries. Where data of individuals located in the European Economic Area is disclosed to a recipient established outside the EEA, we rely on:

  • the European Commission's adequacy decision of July 10, 2023 on the EU-US Data Privacy Framework, where the US recipient is certified (public list at dataprivacyframework.gov);
  • failing that, the standard contractual clauses adopted by the European Commission (Decision 2021/914), supplemented where necessary by additional security measures.

MyHub Solutions LLC does not claim certification under the Data Privacy Framework. You can obtain a copy of the applicable safeguards by writing to contact@myboost.fr.

Security

We use encrypted connections (HTTPS), restricted and individually assigned access, account authentication and recognized providers for hosting and payment. We never ask for your social media passwords. As no measure is infallible, we will inform you, where required by law, of any data breach likely to result in a high risk to you.

Cookies and trackers

A cookie or tracker is a file or identifier stored on or read from your device. In accordance with article 5(3) of Directive 2002/58/EC, article 82 of the loi Informatique et Libertés (French Data Protection Act) and the guidelines and recommendations of the CNIL (French data protection authority), non-essential trackers are only placed with your consent.

Categories used

  • Strictly necessary (no consent required): operation of the store and cart, payment and account security, storing your cookie choice (_tracking_consent), language and currency, the ongoing Emma conversation (stored in your browser for as long as the tab is open).
  • Audience measurement (with consent): traffic statistics from Shopify, Microsoft Clarity, Google Analytics.
  • Marketing and advertising (with consent): Klaviyo (forms and emails), advertising pixels (for example Google Ads, Meta, Pinterest), the mb_ref affiliate cookie (30 days), which attributes an order to the affiliate whose link you followed.

Your choice

On your first visit, the consent banner lets you accept or refuse non-essential trackers just as easily. Continuing to browse or closing the banner does not constitute acceptance. Your choice is stored for 6 months, after which you will be asked again. Trackers subject to consent have a maximum lifetime of 13 months.

You can change or withdraw your consent at any time: Manage my cookies. Withdrawal does not affect processing carried out beforehand. Your browser settings also allow you to delete cookies, but do not replace this choice.

We honor the Global Privacy Control (GPC) signal where required by the law of your place of residence.

Your rights

Under the conditions laid down by the GDPR and the loi Informatique et Libertés, you have the following rights:

  • access to your data and to obtain a copy;
  • rectification of inaccurate or incomplete data;
  • erasure, unless we are required to retain the data (for example invoices);
  • restriction of processing;
  • portability of the data you have provided to us, in a commonly used format;
  • objection to processing based on legitimate interest, and at any time to direct marketing (unsubscribe link in every email);
  • withdrawal of consent at any time, without affecting past processing;
  • in France, instructions regarding what happens to your data after your death (article 85 of the loi Informatique et Libertés).

To exercise them, write to contact@myboost.fr (subject line "Données personnelles"). We respond within one month, which may be extended by two months for complex requests, in which case we will inform you. We only ask for proof of identity where there is reasonable doubt.

If you believe your rights have not been respected, you may lodge a complaint with the CNIL or with the data protection authority of your country of residence or work.

Automated decisions

We do not make any decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you. Automated fraud alerts and Emma's replies are reviewed by a human before any cancellation, refusal or refund.

Minors

Our services are not directed at children. Purchases are restricted to adults or to persons authorized by their legal representative, as provided in the terms of sale.

Where processing is based on consent (marketing emails, cookies), a minor under 15 in France (article 45 of the loi Informatique et Libertés), or under 16 or the age set by the law of their country elsewhere in the European Union (article 8 of the GDPR), cannot consent alone: the consent of the holder of parental responsibility is required. The platforms covered by our services also require a minimum age of 13. If you believe a child has provided us with data without authorization, contact us to have it deleted.

US residents

If you reside in California or in another US state with a consumer data protection law, you may, depending on the law of your state:

  • know what categories of data we collect (identifiers, order information, browsing activity), for what purposes and with whom we share them, and obtain a copy;
  • request their deletion or correction;
  • opt out of the "sale" or "sharing" of your data and of targeted advertising. We do not sell your data for money, but some advertising cookies may qualify as "sharing": Do not sell or share my personal information. The Global Privacy Control signal is also honored;
  • appeal a refusal on our part by replying to our decision by email.

We do not process sensitive data within the meaning of these laws, and you will not suffer any discrimination for exercising your rights. Requests, including through an authorized agent, should be sent to contact@myboost.fr; we may verify your identity using the information we already hold.

Residents of Canada, Brazil and Japan

Canada. In accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial laws, you may access your information, have it corrected and withdraw your consent by writing to contact@myboost.fr. You may also contact the Office of the Privacy Commissioner of Canada or your provincial authority.

Brazil. In accordance with the Lei Geral de Proteção de Dados (LGPD), you may obtain confirmation of processing, access, correction, anonymization or deletion, portability, information about recipients, and withdraw your consent by writing to contact@myboost.fr. You may refer the matter to the Autoridade Nacional de Proteção de Dados (ANPD).

Japan. In accordance with the Act on the Protection of Personal Information (APPI), you may request disclosure, correction, cessation of use or deletion of your data, as well as information about its transfer to the United States and to the other countries where our providers are located, by writing to contact@myboost.fr. You may refer the matter to the Personal Information Protection Commission (PPC).

Changes to this policy

We may update this policy to reflect changes to our services or the law. The date of the last update appears at the top of the page. In the event of a significant change, we will inform you by appropriate means (banner on the website or email).

Contact

MyHub Solutions LLC (MyBoost), 33 N Gould St, Sheridan, WY 82801, USA. Email: contact@myboost.fr (subject line "Données personnelles").

See also: terms of use, terms of sale, legal notice.