Privacy Policy
Last updated: June 11, 2026
1. Who is responsible
The data controller is Hugo Betscher, sole proprietor (entrepreneur individuel) registered in France — SIREN 939 766 473, 9 Villa de Guelma, 75018 Paris, France. Contact: hugobter@gmail.com.
2. What we collect
Account data — name, email address, and your password (stored only as a bcrypt hash; we never see or store it in clear text).
Alert preferences — the markets and signal types you choose.
Billing metadata — your plan, subscription status, and Stripe session references. Card numbers are handled entirely by Stripe and never reach our servers.
Usage analytics — pageviews, clicks, and device information, collected via PostHog (hosted in the EU).
Waitlist entries — email and chosen market.
Technical logs — standard server logs from our hosting provider.
The business-closure leads we display concern businesses, and are derived from public government records (Texas WARN filings, TABC license records).
3. Why we use it (legal bases)
To provide the service you subscribed to — accounts, deals feed, email alerts, transactional emails such as password resets (performance of a contract). To understand and improve the product through analytics (legitimate interest). To meet legal obligations, e.g. invoicing records (legal obligation).
4. Who processes it for us
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Application hosting | USA (SCCs) |
| Supabase (AWS) | Database | EU — Frankfurt |
| Stripe | Payment processing | USA (DPF/SCCs) |
| PostHog | Product analytics | EU — Frankfurt |
| n8n Cloud | Automation (alerts, emails) | EU |
| Google (Gmail) | Email delivery | USA (DPF/SCCs) |
Where providers are located in the USA, transfers are safeguarded by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
5. How long we keep it
Account and preference data: while your account is active, then deleted within 12 months of closure. Billing records: as required by French accounting law (10 years). Analytics: per PostHog's standard retention. Waitlist entries: until you unsubscribe or 24 months of inactivity.
6. Your rights
Under the GDPR you can request access, rectification, erasure, portability, restriction, or object to processing — email hugobter@gmail.com. You may also lodge a complaint with the French supervisory authority (CNIL, cnil.fr). California residents: we honor access and deletion requests consistent with the CCPA; we do not sell personal information.
7. Cookies
We use one essential cookie (salvage_session) to keep you signed in, and PostHog analytics storage to measure product usage. We use no advertising cookies.
8. Email choices
Every deal-alert email includes an unsubscribe link, and alerts can be turned off in your account settings. Transactional emails (password reset, billing) are sent as needed to operate the service.
9. Changes
We may update this policy; material changes will be announced by email or in the app.
See also our Terms of Service.