Privacy policy

Data controller

The data controller is:

Name: Julien Hoste

Mailing address: 200 rue de la Croix Nivert, 75015 Paris, France

Email: contact@thorpia.com

Data we collect

We only collect the minimum data necessary to operate our service:

• Email address: when you join the waiting list or contact us.

• Anonymous usage data: via Umami Analytics (page views, approximate location, device information). Umami does not use cookies and does not store personally identifiable information.

We do not intentionally collect sensitive data.

How we use your data

We use your data for the following purposes:

• To notify you when Thorpia is available in your country or region.

• To send you relevant product updates about Thorpia (for example, roadmap, new features, early access).

• To respond to your requests if you contact us.

• To understand how the website is used and improve it, using anonymous analytics.

• To ensure the security and reliability of our platform (via Supabase and related infrastructure).

Legal basis for processing

We process your personal data based on:

• Your consent, when you voluntarily provide your email address to join the waiting list or contact us.

• Our legitimate interest, for anonymous audience measurement and basic security of the service.

Third-party services

We use the following service providers to operate thorpia.com:

• Supabase: database and backend services used to store and manage user data.

• Resend: email delivery service used to send transactional or notification emails.

• Umami Analytics: privacy-friendly, cookie-free analytics to measure traffic and usage in an anonymous way.

These providers may process data on our behalf strictly for the purposes described above.

Data retention

We keep your data only for as long as necessary for the purposes described in this policy:

• Email address: retained until you ask to be removed or we stop operating the service.

• Anonymous analytics data: retained according to the retention settings of Umami (typically between 14 and 30 months).

Your rights

In accordance with applicable data protection laws (including the GDPR), you have the right to:

• Access the personal data we hold about you.

• Request the correction of inaccurate or incomplete data.

• Request the deletion of your personal data, within the limits of our legal obligations.

• Withdraw your consent at any time, where processing is based on consent.

To exercise these rights, you can contact us at: contact@thorpia.com

Security

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure. This includes the use of Supabase, encrypted connections (TLS), and restricted access to production data.

Data sharing and transfers

We do not sell your personal data.

We only share your data with our service providers listed above, and only to the extent necessary to operate and improve the service. Some of these providers are located outside the European Union; in such cases, we rely on appropriate safeguards (for example, standard contractual clauses) when required.

Contact

If you have any questions about this privacy policy or how your data is handled, you can contact:

contact@thorpia.com