Privacy Policy

Last updated: July 2026 — Compliant with the General Data Protection Regulation (GDPR)

1. Data Controller

GeoPulse is published by GeoPulse SAS. Contact: contact@geo-pulse.app.

2. Data Collected

Registration data: email, name (optional), password (bcrypt hashed). Usage data: pages visited, signals viewed, notification preferences. Payment data: processed exclusively by Stripe. GeoPulse never stores credit card information.

3. Purposes

Data is collected to: provide the GeoPulse service, manage user accounts, process payments (Stripe), send newsletters and push notifications (if enabled), improve the service.

4. Legal Basis

Consent (registration), contract performance (Premium subscription), legitimate interest (service improvement), legal obligation (invoice retention).

5. Data Retention

Account data: duration of subscription + 3 years, unless you request deletion, which takes precedence over that period (see article 6). Payment data (Stripe): per Stripe policy, which follows its own accounting obligations. Browsing data: 12 months maximum. Newsletters: until unsubscription. After an account is deleted, its row is anonymised rather than destroyed: it no longer holds any data identifying you, and serves only to attest that an account existed and was erased.

6. User Rights

Under the GDPR, you have the following rights: access, rectification, erasure, portability, objection, restriction of processing. Erasure is exercised directly from your account, under "Delete my account": your personal data is erased immediately, with no action needed on our side. If a subscription is running, it is cancelled first and erasure is scheduled for the end of the period you already paid for — you keep access until then and can change your mind. Portability is exercised from the same page (CSV export). For other rights: contact@geo-pulse.app, response time 30 days.

7. Cookies

GeoPulse uses only essential cookies: JWT authentication (session), user preferences (language, theme), cookie consent. No advertising cookies, no third-party trackers, no tracking pixels.

8. Sub-processors

GeoPulse uses the following sub-processors: Stripe (payments, USA — Data Privacy Framework), Hetzner (hosting, Germany — EU), Resend (transactional and newsletter emails: your email address is passed to it), Mistral AI (France — EU) and Google Gemini (USA — Data Privacy Framework) for event analysis, and data APIs (GDELT, Finnhub, FRED, CoinGecko, Yahoo Finance, NewsAPI, EIA, CFTC, USDA, Binance — no personal data transmitted). The language models only ever receive public news content, never your account data.

9. Transfers Outside the EU

Some data may be processed by Stripe (USA) under the Data Privacy Framework guarantees. Market analysis data is aggregated and anonymous.

10. DPO Contact

For any questions regarding the protection of your data: contact@geo-pulse.app