Privacy Policy

1. Data controller

Upopy
SIRET: 95099722100011
Email: hi@paulinecx.com

2. What we collect and why

2.1 Essential website operation

Technical data needed to serve pages (e.g. IP address processed by our host for security and delivery) is processed on the basis of our legitimate interest in running a secure website, and/or contractual necessity when you purchase a service.

2.2 Analytics (Umami) — only with your consent

If you accept analytics in the cookie banner, we use Umami Cloud to measure traffic (page views, referrers, browser/OS/device type, country). Umami does not use tracking cookies and aims to anonymize collected data. Legal basis: consent (ePrivacy / GDPR). You can withdraw consent anytime via Cookie settings in the footer.

Processor: Umami Software, Inc. — umami.is

2.3 Feedback widget (Feedbask)

The Website includes a Feedbask widget so you can send feedback. Feedbask does not use cookies. Data you voluntarily submit through the widget is processed to respond to and improve the Website. Legal basis: legitimate interest in collecting feedback, and handling your request when you send one.

Processor: Feedbask — feedbask.com

2.4 Payments (Stripe)

When you buy a Startup Roast or a sponsorship slot, payment is processed by Stripe. We receive confirmation of payment and the information needed to deliver the service (e.g. email, order details). Legal basis: performance of a contract.

Stripe acts as an independent payment provider / processor. See Stripe's Privacy Policy.

2.5 Consent preference

We store your Accept/Reject choice in your browser's localStorage so we do not ask again on every visit. This storage is strictly necessary to remember your preference.

3. Cookies and similar technologies

We do not use advertising cookies. Analytics (Umami Cloud) loads only after you accept in the consent banner. Feedbask does not use cookies. Stripe may set its own cookies on the checkout flow when you pay. You can manage analytics preferences via Cookie settings in the footer or your browser settings.

4. Hosting

The Website is hosted by Vercel, Inc. (USA), which may process connection logs. See also our Legal notice.

5. Retention

Analytics data is retained according to Umami Cloud's retention settings for our account. Payment and order data are kept as long as required for accounting, tax, and legal obligations. Feedback messages are kept as long as useful to handle your request, then deleted or archived as appropriate.

6. International transfers

Some providers (e.g. Vercel, Stripe, Umami Cloud) may process data outside the European Economic Area. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses or the provider's compliance mechanisms.

7. Your rights

Under the GDPR (and similar laws where applicable), you may have the right to access, rectify, erase, restrict, or object to processing, and to data portability. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.

Contact us at hi@paulinecx.com. You may also lodge a complaint with your local supervisory authority (in France: the CNIL — cnil.fr).

8. California / US notice

We do not sell personal information. Optional analytics/feedback tools run only with consent. For requests, email hi@paulinecx.com.

9. Changes

We may update this policy from time to time. The "Last updated" date at the top will change accordingly.