Privacy policy

Porteur is search analytics for solo founders, operated from France and hosted in the European Union. This page says what we hold about you and your product, and what we never do with it.

• Account data: name, email address, hashed password for accounts created with an email, the provider identifier for Google or GitHub sign-ins, plan and subscription status.
• What you connect, read-only: Google Search Console query and page statistics for the property you choose, and product analytics figures from the account you link. Access tokens are encrypted before they are stored, and revoking the grant from your own provider ends our access immediately.
• What your public site says: the single read of your pages that any visitor could make, kept as the context Porteur reuses instead of asking you twice.
• What Porteur found and what you decided: every finding, whether you kept it, and when. This is the record you can hold us to.

Connected data is kept while the account is open and deleted with it. Deleting your account removes your products, connections, briefings, actions and journal within thirty days, and cancels any subscription first. Audit records of security-relevant events are kept longer, without the account they belonged to.

• Polar.sh: payment, receipts and VAT, as merchant of record. Your card details never reach our servers.
• Google, for Search Console access you grant and revoke yourself, and for sign-in when you use it.
• PostHog for product analytics, Resend for email, Polar for payment. None of them receives your Search Console data.

You can access, correct or delete your data at any time: the name is editable in the dashboard, and account deletion takes one action there. The GDPR rights of access, rectification, erasure, portability and objection can also be exercised by writing to the address below. You may lodge a complaint with the CNIL, the French supervisory authority, if you believe your rights are not respected.

Questions about this policy or your data: [email protected]