Privacy policy

This policy covers the RushPilot website and its waitlist. The RushPilot desktop app will have its own policy when it is released.

Who is responsible

The data controller is [Company name or full name], [postal address]. For any question about your data, write to [privacy contact email].

What we collect

When you join the waitlist, we store:

• your email address;
• your answers, if you give them: how many videos you send each month and which agencies you use;
• the date and time you joined, the date you gave your consent and the date you confirmed your address;
• the language of the page you signed up on (English or French), so our emails are in that language;
• your browser language and your approximate country, derived from your IP address by our host;
• how you found the site: the campaign tags in the link you followed (UTM parameters) and the referring website.

Only your email address and your consent are required; without them we can't send you the download link. Everything else is optional.

We don't store your IP address. To block abuse, we keep a one-way hash of it, together with a counter, and delete it automatically within two days.

Why, and on what basis

• To send you the download link when the beta opens, and occasional news about RushPilot. Legal basis: your consent, given with the checkbox on the form.
• To decide what to build, using your answers in aggregate (for example, the share of members who sell on Pond5). Legal basis: our legitimate interest in building a product people need.
• To protect the form against spam. Legal basis: our legitimate interest in keeping the service working.

We don't sell your data, we don't use it for advertising, and we make no automated decision about you with it.

Who can see it

Only the publisher's team, through a password-protected console. The data travels encrypted (HTTPS) and is stored in a database that only our server can query.

Who processes it

• Vercel Inc. hosts the website.
• [Supabase Inc. or Neon Inc.] hosts the database, in the [region] region.
• Resend (Plus Five Five, Inc.) sends our emails.

Some of these providers are based in the United States. Transfers are covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework, as stated in each provider's data processing agreement.

How long we keep it

Until you unsubscribe or ask us to delete it, and at most [24 months] after the public release of RushPilot. If you unsubscribe, your address stays marked as unsubscribed so we never email you again by mistake; ask us and we delete it entirely.

After you sign up, we send one email asking you to confirm your address. If you don't confirm it within 30 days, your signup is deleted automatically.

Deleted data can remain for a short time in the encrypted backups of our database host (at most [7 days]) and in the delivery logs of our email provider (at most [30 days]), after which it is erased.

Cookies

The public website stores nothing on your device: no cookies, no local or session storage, and no analytics or advertising trackers. The campaign tags of the link you followed are read from the address of the page and sent only with your signup.

Your rights

You can access, correct or delete your data, restrict or object to its use, ask for a copy, withdraw your consent at any time, and, under French law, give instructions on what happens to your data after your death. Every email we send has a one-click unsubscribe link. For anything else, write to [privacy contact email]; we answer within one month.

If you think we haven't respected your rights, you can complain to the CNIL (cnil.fr) or to the data protection authority of your country.