Legal

GDPR, Your rights

A summary of how BrandWitness handles your personal data and how to exercise your rights.

Updated: June 2026

This page summarises your GDPR rights with respect to BrandWitness. For full details on our data processing, please consult our Privacy Policy.

Who is responsible for your data?

BrandWitness is the data controller for your personal data. Contact: contact@brandwitness.fr.

What data do we collect?

BrandWitness only collects data necessary for the service to function:

AccountEmail address, password (hashed), account preferences.
PaymentManaged by Stripe. BrandWitness does not store your payment details.
GA4 DataYour traffic statistics, read via the Google Analytics API. Used solely for service delivery, not stored beyond the monthly analysis cycle.
Technical logsIP address, browser, pages visited, retained for 30 days for security and debugging purposes.

Why do we process your data?

✓Perform the service contract (content production, GA4 analysis)
✓Manage your account and subscription
✓Send your monthly report and article deliveries
✓Improve the service (aggregated data only)
✓Comply with our legal obligations

Your rights

Under the GDPR, you have the following rights:

AccessObtain a copy of the data we hold about you.
RectificationCorrect inaccurate or incomplete data.
ErasureRequest deletion of your data ("right to be forgotten").
PortabilityReceive your data in a structured, machine-readable format.
ObjectionObject to certain processing activities, in particular for marketing purposes.
RestrictionRequest restriction of processing in certain cases.

To exercise these rights, contact us at contact@brandwitness.fr. We respond within one month.

If you believe your rights are not being respected, you can lodge a complaint with your national data protection authority. In France: CNIL — cnil.fr/fr/plaintes.

Retention Period

Your account data is retained for the duration of your subscription, plus 3 years after cancellation (legal obligation). Payment data is managed by Stripe and retained according to their own retention policy. GA4 data is not stored beyond the monthly analysis cycle.

Transfers Outside the EU

Vercel Inc. (hosting) is based in the United States. Data transfers are covered by the European Commission's standard contractual clauses. Database data is hosted on Neon, in the Europe region (eu-west-3).

For full details on our data processing, including cookies and sub-processors, please consult our full Privacy Policy.