Privacy policy

Porteur, at porteur.ai, is a database of rising markets: search volumes in France and the United States, stages, the lag between the two curves and INSEE business creations, available on the site, by email and through the MCP server. The publisher of the site is the controller for the data described here. The service is hosted in the European Union.

• Account data: name, email address, hashed password for accounts created with an email, the provider identifier for Google or GitHub sign-ins, plan and subscription status.
• What you create in the product: portfolios, tracked topics and notes, alerts generated each week, API keys (only a fingerprint of the key is kept, never the key itself) and your exchanges with support.
• Newsletter subscriptions: email address, language, confirmation date and, where applicable, unsubscription date.
• Checker lookups and MCP calls: the keyword or tool requested, the result, the date and a salted hash of the IP address. The raw IP address is never recorded; the hash serves quotas and abuse prevention.

Account data and what you create are kept for as long as the account exists. Deleting the account, available from the dashboard, first cancels the subscription and then erases the account, portfolios, alerts, API keys and support exchanges. Only the audit log, MCP activity and the checker lookup history remain, and they hold nothing beyond the account identifier, the keyword or tool called and hashed IP addresses. A newsletter unsubscription takes effect immediately. Porteur hosts no file sent by its users: the service has no upload.

• Polar.sh: payment, subscriptions, invoices and VAT, as merchant of record. Your card details never reach our servers.
• Resend: transactional email (address verification, portfolio alerts, newsletter). PostHog, EU region: audience and product usage measurement.
• Data sources: search volumes come from Google Ads keyword data, licensed through DataForSEO; business creations come from INSEE's Sirene register, a public dataset. A keyword typed into the checker that is not in the base may be sent to DataForSEO to obtain its volume; no account data travels with it.

You can access, correct or delete your data at any time: the name is editable in the dashboard, and account deletion takes one action there. The GDPR rights of access, rectification, erasure, portability and objection can also be exercised by writing to the address below. You may lodge a complaint with the CNIL, the French supervisory authority, if you believe your rights are not respected.

Questions about this policy or your data: [email protected]