Privacy Policy

Data Collection

For people looking for a space, Obaflow collects the following data solely for the purpose of connecting users with coworking spaces: name, email, phone, desired city, budget, and capacity needs. Operators of listed spaces are covered separately (see below).

Data Usage

Your data is used exclusively to: suggest coworking spaces suited to your needs, connect you with partner spaces, and improve our recommendation services.

Operators of listed spaces

Obaflow may occasionally contact the operators of the spaces listed on the site, to tell them about their free listing and invite them to check its details.

• Controller: the site publisher, identified in the legal notice.
• Data concerned: the space's name, the e-mail address published by the operator, the address of its website, dates of contact and, where applicable, of objection.
• Source: the operator's website, where the e-mail address is published.
• Purpose and legal basis: to inform the operator of its listing and let it correct it; Obaflow's legitimate interest in publishing accurate information (Article 6(1)(f) GDPR).
• Recipients: Obaflow only, in a non-public internal register, stored with the hosting providers listed below.
• Retention: 3 years from the last contact. If you object, your address and the date of the objection are kept so that we do not write to you again.
• Your rights: access, rectification, erasure, restriction and objection, at any time: reply "STOP" to the message you received or write to contact@obaflow.com. You may also lodge a complaint with a supervisory authority, in particular the one of your country of residence (in France, the CNIL, www.cnil.fr).

Cookies and Trackers

Obaflow uses only technical cookies necessary for the site to function. No advertising or third-party tracking cookies are used.

While you browse, a random anonymous session identifier is held temporarily in your browser (sessionStorage — not a cookie). If you send us a contact request, it lets us see which pages were viewed during that same session so we can better understand your needs. This identifier is deleted when you close your browser, cannot recognise you across visits, is never shared with third parties, and the page history is automatically erased from our servers after 30 days.

Your Rights (GDPR)

Under the GDPR, you have the right to access, rectify, delete, restrict, object to and port your data. To exercise these rights, contact us at contact@obaflow.com. You may also lodge a complaint with a supervisory authority, in particular the one of your country of residence (in France, the CNIL, www.cnil.fr).

Data Hosting

Data is hosted by Vercel (site and functions hosting), Supabase (database — AWS, EU region) and Cloudflare (global CDN). European users' data is stored within the European Union.