Privacy Policy
Last updated: October 2026 — Compliant with the General Data Protection Regulation (GDPR)
1. Data Controller
The data controller is Ludovic Sirvent EI, a French sole trader (entrepreneur individuel, EI) registered as RCS Avignon 103 413 340, who publishes GeoPulse under that trading name. Contact: contact@geo-pulse.app.
2. Data Collected
Registration data: email, name (optional), password (bcrypt hashed). Usage data: pages visited, signals viewed, notification preferences, and the log of notifications sent to you (type, channel, date — to show you what your account brought you). Decisions you pin and the notes you write on them, kept until you remove them. Feedback you send from the “Your feedback” button: type, text, page of origin and date (see article 10). Payment data: none, the service is free. GeoPulse never stores credit card information.
3. Purposes
Data is collected to: provide the GeoPulse service, manage user accounts, send newsletters and push notifications (if enabled), improve the service, including from the feedback you send (see article 10).
4. Legal Basis
Consent (registration), contract performance (terms of service), legitimate interest (service improvement), legal obligation (retention of accounting records from the paid offer, where applicable).
5. Data Retention
Account data: duration of account use + 3 years, unless you request deletion, which takes precedence over that period (see article 6). Stripe customer records created during the paid offer: per Stripe policy (see article 8). Browsing data: 12 months maximum. Log of notifications sent: 90 days. Feedback sent: 24 months, or until the account is deleted if that comes first. Newsletters: until unsubscription. After an account is deleted, its row is anonymised rather than destroyed: it no longer holds any data identifying you, and serves only to attest that an account existed and was erased.
6. User Rights
Under the GDPR, you have the following rights: access, rectification, erasure, portability, objection, restriction of processing. Erasure is exercised directly from your account, under "Delete my account": your personal data is erased immediately, with no action needed on our side (a Stripe customer record inherited from the paid offer is deleted on request, see article 8). Portability is exercised from the same page (CSV export). For other rights: contact@geo-pulse.app, response time 30 days.
7. Cookies
GeoPulse uses only essential cookies: JWT authentication (session), user preferences (language, theme), cookie consent. No advertising cookies, no third-party trackers, no tracking pixels. Your browser also keeps, locally, the visit-day counter described in article 10.
8. Sub-processors
GeoPulse uses the following sub-processors: Hetzner (hosting, Germany — EU), Resend (transactional and newsletter emails: your email address is passed to it), Cloudflare (USA), for the Turnstile anti-bot check on the sign-up, login, contact and feedback forms, Mistral AI (France — EU) and Google Gemini (USA — Data Privacy Framework) for event analysis, and data APIs (GDELT, FRED, Kraken, Yahoo Finance, NewsData.io, EIA, CFTC, USDA — no personal data transmitted). The event-analysis models only ever receive public news content, never your account data. Anthropic (USA) assists in reading and sorting the feedback sent through “Your feedback” (decided on 15/10/2026): a piece of feedback’s text, type and page may be passed to it, never your email address; the use of these exchanges to train its models is turned off. Stripe (USA — Data Privacy Framework), the payment provider of the paid offer, no longer processes any payment, and no customer record is created there any more. The records created there during the paid offer (email address, name if one was given, language, GeoPulse account identifier) remain stored by Stripe under its own policy, including after the GeoPulse account is deleted; their deletion can be requested at contact@geo-pulse.app.
9. Transfers Outside the EU
Stripe customer records created during the paid offer remain with Stripe (USA) under the Data Privacy Framework guarantees. The text of feedback sent through “Your feedback” may be processed by Anthropic (USA) for reading and sorting (see article 8). Market analysis data is aggregated and anonymous.
10. Your feedback (“Your feedback” button)
The “Your feedback” button lets an account with a confirmed email address tell us what it misses, what gets in its way or what it does not understand. Purpose: to improve the service from the feedback you send. Data: the type of feedback you choose, the text you write, the page you send it from, the link you followed to get there (button, invitation or email), the site language and the date; they are attached to your account. Nothing else is captured: neither your browsing nor your clicks. Retention: 24 months, or until your account is deleted if that comes first — your feedback is then erased with it. Each piece of feedback receives a status (received, under review, accepted, done or declined) and, where relevant, a short reply, which you read in your account, under “My feedback”. Exceptionally, to clarify a piece of feedback, we may write to your account’s email address; never for any other purpose. Feedback is stored on our servers (see article 8), with no third-party form or tracking tool; reading them may be assisted by Anthropic (see article 8). To offer you only once to give feedback, your browser keeps locally the dates of your first three days of visit; they are never sent to us, and are only kept if you accepted cookies.
11. DPO Contact
For any questions regarding the protection of your data: contact@geo-pulse.app