Legal Notice & Privacy Policy

Website publisher

Publisher: Adrien Russo.

Contact for any legal, privacy, or data-protection requests: hello@adrien-russo.com.

Hosting

This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, United States). Cloudflare processes connection metadata — including IP addresses — to route traffic and protect the site against abuse. This processing relies on SearchFlow.app's legitimate interest in operating a secure and available website.

Data we collect — waitlist

When you submit the early-access form, we collect your email address. That is the only piece of personal data we store for waitlist members.

Why we use waitlist data

All waitlist emails are sent through Loops. Every marketing message includes an unsubscribe link so you can opt out at any time. Opting out of marketing does not affect essential communications if you later create an account.

Legal basis: your consent, given by submitting the early-access form. You can withdraw consent at any time via the unsubscribe link in any email, or by contacting hello@adrien-russo.com.

• Launch notification — one email when SearchFlow.app goes live, with early-access details.
• Post-launch marketing — product news, feature updates, and occasional promotional emails about SearchFlow.app after launch.

Data we collect — accounts

• Email address — required to identify your account, send confirmation and password-reset emails, and deliver essential service notifications.
• Full name — optional, used to personalise your experience.
• Password — stored as a secure hash; the plain-text password is never saved.
• Marketing preference — whether you opted in to product news and updates at sign-up.

Why we use account data

• Service emails (account confirmation, password resets, security alerts, billing receipts, critical product changes): these are sent on the basis of contract performance. They are mandatory and cannot be turned off.
• Marketing emails (product news, feature updates): sent only if you explicitly opted in at sign-up. Legal basis: your consent. You can withdraw at any time in your account settings.

Analytics

SearchFlow.app uses Google Analytics to understand how visitors use the site — pages viewed, session duration, referral sources. All data is pseudonymised. Google Analytics only activates after you accept analytics cookies.

Google Search Console provides aggregated, anonymous search-performance data from Google's index. It does not place cookies on your browser and does not process personal data about individual visitors.

Legal basis for analytics: your consent.

Service providers and data transfers

SearchFlow.app uses the following service providers. All are based outside the European Economic Area; data transfers are covered by Standard Contractual Clauses (SCCs) or equivalent safeguards recognised by the European Commission.

• Supabase (Supabase, Inc., USA) — stores account data and handles authentication.
• Loops (Loops Technologies, Inc., USA) — email delivery platform for all communications sent by SearchFlow.app: waitlist, transactional, marketing, promotional, and campaign emails.
• Google LLC (USA) — provides Google Analytics and Google Search Console.
• Cloudflare, Inc. (USA) — hosts and delivers the website via Cloudflare Pages.
• Railway (Railway Corp., USA) — runs the back-end application services.

Retention

• Waitlist data: kept until you unsubscribe or request deletion, or no later than three years after your last meaningful contact.
• Account data: kept for as long as your account is active. After account deletion, data is purged within 30 days except where a longer retention period is legally required.
• Marketing preference: retained until you withdraw consent — via unsubscribe in any email, in your account settings, or by contacting hello@adrien-russo.com.
• Analytics data: subject to the Google Analytics retention setting (13 months maximum).
• Technical logs: up to 12 months.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact hello@adrien-russo.com. If you are not satisfied with how your request is handled, you may lodge a complaint with the CNIL (France) or your local data-protection authority.