Política de privacidad

Visiting rushlot.com

• What: your IP address, your browser’s user agent, the page you ask for, the page you came from and the time. On the home page, the country your IP address points to picks the language we send you; it is not stored.
• Why: to send you the page, keep the site running and stop abuse.
• Legal basis: our legitimate interest in running a working, secure site (GDPR Art. 6(1)(f)).

Analytics, only if you click Accept

• What: the pages you view (address, campaign tags such as utm_source, the page you came from), how far you scroll, which sections you see, which buttons and links you click, the FAQ entries you open, and a random identifier kept in a cookie to recognise your next visit. PostHog also receives your IP address and derives an approximate location from it; Google Analytics uses the IP address of EU visitors for location only and does not store it. No session recording, and no form field’s content is ever sent.
• Why: to know which pages people read and where they come from, so we can improve the site.
• Legal basis: your consent (GDPR Art. 6(1)(a) and Art. 82 of the French Data Protection Act). Until you choose, nothing loads and nothing is sent. If your browser sends Do Not Track, PostHog records nothing and Google Analytics sets no cookie.

Forms on the site

• Contact form: the subject, your name, your e-mail address, your message, any file you attach, and for beta requests your role. The e-mail we receive also carries your browser’s user agent, the page you wrote from and a short fingerprint of your IP address. Why: to answer you. Legal basis: our legitimate interest in answering messages (Art. 6(1)(f)), or the steps you ask for before buying (Art. 6(1)(b)).
• Waiting list, beta and free tools: your e-mail address, which button you signed up from, your browser’s user agent, the page you came from and the time; for the beta, also the marketplaces you sell on and a range of clips per month. Why: to tell you when Rushlot opens or when your beta place is ready. Legal basis: your consent (Art. 6(1)(a)), which you withdraw by writing to contact@rushlot.com.
• “E-mail me the link” on a phone: your e-mail address, used once to send you the download page’s address. We do not store it. Legal basis: your request (Art. 6(1)(b)).
• Flood protection: each form keeps your IP address for 10 to 15 minutes to count how many messages it sent. Legal basis: our legitimate interest in stopping spam (Art. 6(1)(f)).

Your Rushlot account

• What: your e-mail address; for each sign-in, a random request number, a hash of the link we e-mail you and the short phrase you confirm; for each signed-in computer, a random number, a hash of its key, its operating system and the dates it was first and last seen; your plan, your clip counters, your credit balance and, if you joined early, your Founder seat number.
• Why: to sign you in, keep your computers signed in and apply the limits of your plan. Legal basis: the contract you accept by creating the account (Art. 6(1)(b)).

Metadata drafting

• What leaves your computer: when you ask the app to draft metadata, it sends our server the clip’s title (taken from its file name), the file name, nine still frames (JPEG, 768 pixels on the long side) and the keyword choices the app learned for Getty. To pick a Pond5 thumbnail or complete Getty keywords, it sends Pond5’s public preview frames, or the clip’s title, description and keywords. Never the video file.
• What we do with it: our server sends it to Anthropic’s Claude model, which drafts the title, description and keywords; it checks any species name with the WoRMS and GBIF registries (they receive the name and nothing else); it returns the result to your app. We store none of it: our logs hold only an outcome code, and the clip counter records a random reference.
• Legal basis: the contract (Art. 6(1)(b)): it is the service you pay for.
• People in your footage: a frame can show a person, a place or a date. We get these images from you, not from the people filmed, and only to describe your clip. Telling each of them would be impossible for us (Art. 14(5)(b)); you decide what you film and send, and you remain responsible for the releases your marketplaces require.

Payments

• What: Stripe’s checkout page collects your e-mail address, name, billing address, card details and, if you give one, your VAT number. We never see your card number. Stripe sends us your customer number, your subscription’s status, plan and renewal date, and the reference of each payment event.
• Why: to take payment, issue invoices and keep accounts. Legal basis: the contract (Art. 6(1)(b)), and our legal duty to keep accounting records (Art. 6(1)(c)).

The desktop app

• Usage statistics, only if you say yes: on first launch the app asks you; until you answer, nothing is sent, and you can change your answer in Settings, which deletes what was waiting. The events are a closed list (the app started with its version, system and language; an onboarding step; a marketplace connected; a setting changed, by name only; a clip imported, drafted, approved or sent; a marketplace page that changed or asked for a check; a send held back by the service status; a crash, as a code; a support file saved; a plan limit reached), tagged with a random number created on your computer. No title, file name, keyword or free text. Legal basis: your consent (Art. 6(1)(a)).
• Service status: the app reads rushlot.com/health.json to know whether sending to a marketplace is safe right now. The request carries the app’s name and version. Legal basis: our legitimate interest in protecting your marketplace accounts (Art. 6(1)(f)).
• Updates: installed copies ask updates.rushlot.app whether a newer version exists, a request that carries your IP address and the app’s version. Host: [À COMPLÉTER PAR LE PROPRIÉTAIRE : hébergeur du flux de mises à jour, prévu Cloudflare R2, pas encore en ligne].

Giving us data is never a legal obligation. Without an e-mail address you cannot have an account, buy a plan or get an answer; everything else is optional.

What rushlot.com stores on your device:

• rl_analytics_consent_v1 (this browser’s storage): your answer to the banner, kept until you change it. Needs no consent: it records your choice.
• rushlot_locale (cookie, one year): the language you picked in the language menu, set only when you pick one.
• Only after you accept: ph_…_posthog (PostHog’s random identifier, a cookie and browser storage, one year), _ga and _ga_NX68H8KD47 (Google Analytics’ identifier and session, cookies, 13 months).

Stripe’s checkout page, on stripe.com, sets its own cookies under Stripe’s policy. The desktop app sets no cookie of ours.

You can change your answer here at any time. Declining after accepting deletes the PostHog and Google Analytics cookies from this browser.

You can ask us, at any time and for free:

• for a copy of your data (Art. 15), and to receive what you gave us in a reusable file (Art. 20);
• to correct it (Art. 16), or to delete it (Art. 17), including your whole account;
• to limit what we do with it (Art. 18);
• to stop a use based on our legitimate interest (Art. 21);
• to withdraw a consent (Art. 7(3)), without affecting what was done before;
• and to follow your instructions on what happens to your data after your death (Art. 85 of the French Data Protection Act).

Write to contact@rushlot.com. We answer within one month, two more months at most for a complex request, and we may ask you to write from the e-mail address of your account to prove it is yours. Rushlot makes no automated decision about you that has legal or similar effects (Art. 22): plan limits only count what your plan includes.

You can also complain to the French data protection authority, the CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr.