Privacy policy

Controller

The controller is Teo Bouancheau, trading as Stellarwind.

Privacy contact: hello@stellarwind.ai

Data collected

• The email address you submit to subscribe to Stellarwind AI emails. Providing it is optional, but required to receive those emails.
• The IP address associated with a subscription request, used in application memory to limit repeated submissions.

• In the mailing list software: your email address, your subscription status (unconfirmed, confirmed or unsubscribed) and the dates on which it was created and last changed.
• Delivery events that our email delivery provider reports for emails sent to you: bounces and complaints.
• Technical request data processed by our hosting and network providers when you visit the site or the mailing list pages: IP address, date and time, requested address and browser user agent.
• The site's own application logs record subscription events with a shortened one-way hash of the email or IP address, never the address itself.

Our email templates contain no open-tracking pixel and no tracked links: we do not record whether you open our emails or click their links.

Purposes and legal bases

Sending the Stellarwind AI newsletter and occasional emails about Stellarwind AI products, on the basis of your consent, given when you confirm your subscription from the confirmation email.

• Limiting repeated subscription requests, processing technical logs and protecting the site and the mailing list against abuse: our legitimate interest in keeping the service secure and available (GDPR art. 6(1)(f)).
• Processing bounces and complaints so that no further email is sent to an address that rejects it: our legitimate interest in reliable delivery and in honouring complaints (GDPR art. 6(1)(f)).
• Keeping the record of your consent and of its withdrawal: to be able to demonstrate consent, as GDPR art. 7(1) requires.

Purchases

Products are sold by Polar Software, Inc., which acts as merchant of record. Polar collects and processes the data needed for checkout, payment, tax and invoicing under its own privacy policy (https://polar.sh/legal/privacy).

As the creator of the product, Stellarwind processes the order information Polar makes available to its sellers only to deliver the product, provide support and enforce the licence, on the basis of the contract (GDPR art. 6(1)(b)). It is kept for the duration of the contractual relationship, then archived only where a legal obligation requires it or as proof within the applicable limitation period.

Recipients

Subscription confirmation and unsubscribe links open the mailing list service at newsletter.stellarwind.agency.

• Vercel Inc., hosting of the website.
• Hetzner Online GmbH, hosting of the content database, the content service and the mailing list.
• A network and DNS provider, DNS for stellarwind.ai and network protection in front of the content service and the mailing list service.
• An email delivery provider, delivery of the newsletter and confirmation emails.
• Polar Software, Inc., merchant of record for product purchases.

Your data is never sold or rented.

Retention periods

• Subscriber data: until you unsubscribe, or at the latest 3 years after your confirmation or your last contact with us (such as a reply to an email or a new subscription request). Before that date we may ask once whether you want to stay subscribed; without a positive answer, your data is deleted.
• Unconfirmed subscription requests: deleted 30 days after the request.
• After you unsubscribe: only your email address and the dates of your consent and of its withdrawal are kept, for 3 years, so that we never email you again and can prove we honoured your request. They are then deleted.
• Rate limit keys: held in application memory only, for at most 15 minutes, and never written to disk.
• Technical logs: at most 6 months.
• Requests to exercise your rights and our answers: for the time needed to answer, then as proof within the applicable limitation period.

Your rights

You can withdraw your consent through the unsubscribe link in any marketing email. You may also request access to, correction or deletion of your data, or restriction of its use. You may lodge a complaint with the French data protection authority, the CNIL.

• To exercise your rights of access, rectification, erasure, restriction, portability and objection (GDPR arts. 15 to 18, 20 and 21), write to hello@stellarwind.ai, preferably from the email address concerned.
• We answer within one month of receiving your request. This period may be extended by two further months for complex or numerous requests; we tell you within the first month if it is (GDPR art. 12(3)).
• We ask for proof of identity only if we have reasonable doubts about who is making the request (GDPR art. 12(6)).
• Withdrawing your consent does not affect processing carried out before the withdrawal (GDPR art. 7(3)).
• CNIL complaints: https://www.cnil.fr/fr/adresser-une-plainte

International transfers

• Hetzner Online GmbH is established in Germany, in the European Union.
• Vercel Inc. and our network and DNS provider are based in the United States. Both are certified under the EU-U.S. Data Privacy Framework, covered by the European Commission's adequacy decision (EU) 2023/1795 of 10 July 2023 (GDPR art. 45), and their data processing agreements also include the EU standard contractual clauses (GDPR art. 46(2)(c)).
• Our email delivery provider is based in the United States. It is covered by the EU-U.S. Data Privacy Framework, and its service terms include the EU standard contractual clauses.
• Polar Software, Inc. is based in the United States and handles the transfer of the data it collects at checkout under its own privacy policy.

Cookies

This site sets no cookies and loads no third-party analytics script.

If audience measurement or any other new processing is introduced, this policy and its date are updated before it starts.