Legal
Last updated 10 August 2026
France Friend is operated as part of Business Game Changer. For the purposes of the General Data Protection Regulation (GDPR), Business Game Changer is the data controller for information processed through francefriend.com.
We collect only what the service needs to function:
We don't collect payment card details directly — Gumroad handles that as an independent payment processor.
We process your data under three legal bases recognised by the GDPR: performance of a contract (we need your documents to give you the analysis you're asking for), legitimate interest (keeping the service secure and working correctly), and, for marketing communications you opt into, your consent.
Your uploaded documents are sent to our AI providers solely to generate your analysis — reading the text, identifying what the letter is, working out deadlines and next steps, and drafting a reply if you ask for one. Your documents are never used to train any AI model, ours or our providers'. Analysis results are stored in your account so you can revisit past letters, and used to flag connections between letters when relevant (for example, an income figure that doesn't match across two documents).
We use a small number of specialist providers (subprocessors) to run the service. Each only sees what it needs to do its specific job, and none are permitted to use your data for their own purposes.
| Provider | What they do | Based in |
|---|---|---|
| Mistral AI | Reads the text out of your uploaded letter (OCR) | France |
| Anthropic (Claude) | Generates the plain-English analysis and reply drafts | United States |
| Vercel | Hosts the application and stores uploaded files | United States / EU edge network |
| Neon | Hosts the database (account and letter metadata) | United States / EU region |
| Resend | Sends sign-in links and account emails | United States |
| Gumroad | Processes Pro and Lifetime payments | United States |
We don't sell your data, and we don't share it with advertisers or data brokers — France Friend doesn't run ads.
Some of our subprocessors — notably Anthropic, Resend, and Gumroad — are based in the United States. Where data leaves the EU/EEA, we rely on Standard Contractual Clauses or equivalent safeguards recognised under GDPR to ensure it stays protected to the same standard.
We keep your documents and analysis history for as long as your account is active, so your letter history stays useful. If you delete your account, your documents and personal data are removed within 30 days, except where we're legally required to keep limited records for longer (for example, billing records for tax purposes).
Documents and account data are encrypted in transit and at rest. Access to production data is limited to what's necessary to operate the service. No system is perfectly secure, but we take reasonable, industry-standard measures to protect your information.
Under the GDPR, you have the right to:
To exercise any of these, email us — see Contact below. You also have the right to lodge a complaint with France's data protection authority, the CNIL, if you believe your data hasn't been handled correctly.
France Friend is not directed at children, and accounts require users to be at least 16. We don't knowingly collect data from anyone younger than that.
We may update this policy as the service changes. Material changes will be flagged on the site or by email, and the "Last updated" date above will reflect the latest revision.
Questions about your data, or want to exercise any of the rights above? Email wearegamechangers@outlook.com.