To fill in: 4
Two roles, two situations
Poquelin is software for newsrooms. Depending on the data, our role under the General Data Protection Regulation (GDPR) differs:
- Controller for the data we collect on our own behalf: your user account, your organisation, billing, our exchanges with you, the operation and security of the service.
- Processor for everything you process through the tools: your content, your sources, your media, the access to your sites and social accounts, and the data of your sites’ readers that the Analytics tag and Push notifications collect for you. You are the controller; we act only on your instructions, under the data processing agreement included in the terms of service.
The controller is Company name, registered office address. For any question about your data: privacy email address.
Your account and your organisation
When you sign up, we collect your email address and the name you enter. If you choose “Continue with Google”, we receive from Google your email address, your name and your profile picture, nothing else. Poquelin stores no password: you sign in with a one-time code sent by email, or with Google.
We then process what your use produces: the organisations and sites you create, the members you invite and their roles, your preferences (language, theme), the sign-in and action logs the security of the service requires, and the usage measures (volumes consumed per tool) that enforce your plan.
Legal basis: performance of the contract between us (the terms of service) and, for security and logs, our legitimate interest in protecting the service. For billing, our legal obligation to keep accounts.
What you process in the tools
Poquelin’s tools handle the data you entrust to them: feeds and articles followed in Reader, topics and events in Planner, briefs, sources (links, PDF documents, social posts, photos, videos) and articles in the Editor, media in the Media library, Push notifications, Social Creator posts, audience and revenue figures in Analytics. This data may contain personal data (names of authors, of people quoted, of subscribers): you remain responsible for it, we process it for you.
The access you connect (WordPress or API sites, social accounts, Google Ad Manager) is stored encrypted at rest (AES-256-GCM) and is used only for the operations you request: publishing, syncing, reading reports. You can revoke it at any time from your site settings.
Support access: our administrators can enter your workspace to help you, only at your request or to resolve an incident. Each access is limited to one hour and logged.
Artificial intelligence
When you use an AI function (generating a brief, an article, headlines, captions, a source analysis, a transcript), the text, documents or media involved are sent to the model provider configured for that function: Google (Gemini, through the Gemini API or Vertex AI in a European region), OpenAI (GPT models and Whisper transcription) or Anthropic (Claude models). We use their business APIs, whose terms exclude training their models on the data sent.
We keep the requests and responses of each call for 30 days, to diagnose an unexpected result and control costs; after that, only the volumes consumed remain. Editorial voice profiles (reference articles, rules) stay in your workspace and are sent only with the requests that need them.
If you are a reader of a site equipped with Poquelin
A publisher that uses Poquelin can install a Poquelin script on its site, which feeds two services. In both cases the publisher is the controller and Poquelin acts on its behalf; the publisher’s own privacy policy informs you, and your requests should go to the publisher — we forward them if you write to us.
Audience measurement (Analytics): the tag sets no cookie and stores no identifier in your browser. To count readers, the server computes an identifier from a secret renewed every day, the site’s identifier, your IP address and your browser; the IP address is discarded immediately, yesterday’s secret is destroyed, and the identifier can neither recognise you from one day to the next nor follow you from one site to another. No geolocation. Measures are kept in 30-minute slices for about 7 days, per day for about 90 days, then as monthly aggregates without individual data. In our view this measurement falls within the tools exempt from consent under the French CNIL guidelines; the publisher remains bound to inform you.
Notifications (Push): if you agree to receive a site’s notifications, your browser provides a notification token (Firebase Cloud Messaging, Google) that we associate with the site, together with the device family, browser, operating system and language, to adapt delivery and count subscribers. A one-year identifier cookie lets us recognise your device if you clear the browser’s storage. You unsubscribe by removing the site’s notification permission in your browser; inactive subscriptions are deleted.
Connected Google services
Poquelin may access some of your Google data, only when you ask for it: your basic profile to sign you in, and the reports of your Google Ad Manager network to match advertising revenue to your articles. This data is used exclusively to display these functions in your workspace; it is never sold, used for advertising, or read by a human outside the cases Google allows (your explicit consent, security, compliance with the law).
Poquelin’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can withdraw this access at any time from your Google account or from the connection settings of your Poquelin site.
Providers that process data for us
We entrust some operations to providers bound by contract, who may use the data only for the task entrusted. Outside the European Union, transfers rely on the European Commission’s standard contractual clauses and, where the provider is certified, on the EU–US Data Privacy Framework.
| Provider | Role | Data | Location |
|---|---|---|---|
| netcup GmbH | Hosting of the application, databases and media | All application data | Germany (Nuremberg) |
| Scaleway SAS | Encrypted backups, kept 30 days | Copies of databases and media | France (Paris) |
| Resend, Inc. | Sending the service’s emails (sign-in codes, invitations, billing) | Email address, email content | United States |
| Stripe Payments Europe, Ltd. | Subscription payment and invoicing | Billing identity and details, payment method (never stored by us) | Ireland |
| Google (Gemini API, Vertex AI) | AI models | Content of AI requests | European Union (Vertex AI) or United States (Gemini API) |
| OpenAI, L.L.C. | AI models, audio transcription | Content of AI requests, audio tracks of sources | United States |
| Anthropic, PBC | AI models | Content of AI requests | United States |
| Google Ireland Ltd (Firebase Cloud Messaging) | Delivery of Push notifications to browsers | Notification token, notification content | European Union / United States |
| Functional Software, Inc. (Sentry) | Technical error tracking | Error traces, account identifier, IP address | United States |
| Cloudflare, Inc. | Delivery of the poquelin.ai website (not the application) | Visitors’ IP addresses and requests, connection logs | Global network, points of presence in Europe; United States |
Image banks (Unsplash, Pexels, Pixabay, Openverse) and the social networks or CMS you connect receive the requests you trigger (an image search, a post); they act under their own terms, which you accept by using them.
We inform our customers of any change to this list at least 30 days before it takes effect.
Retention periods
| Data | Period |
|---|---|
| Account, organisation, sites and their content | While the account is active, then 30 days in the bin before permanent deletion |
| One-time sign-in codes | A few minutes |
| Sessions | Closed on sign-out or after 7 days of inactivity |
| AI requests and responses | 30 days |
| Invoices and accounting records | 10 years (legal obligation) |
| Technical and security logs | 12 months |
| Backups | Rolling 30 days |
| Audience measures of equipped sites | 30-minute slices: 7 days; days: 90 days; monthly aggregates afterwards |
| Notification subscribers of equipped sites | Until unsubscription or token inactivity |
Security
Data hosted in the European Union, encrypted in transit (TLS); secrets and connected access encrypted at rest; passwordless sign-in; roles and permissions per organisation and per site; encrypted backups with tested restoration; limited and logged support access. In the event of a data breach likely to put you at risk, we inform you without undue delay and, where the law requires it, the CNIL within 72 hours.
Your rights
You have the right to access, rectify, erase, restrict, object to and port the data concerning you, and to set directives on its fate after your death. Most of these are exercised directly in the application (profile, organisation, bin); for the rest, write to privacy email address. We answer within one month. You may also lodge a complaint with the CNIL, the French supervisory authority.
Where Poquelin acts as a processor (data you process for your own readers), send your request to the publisher concerned; if it reaches us, we pass it on.
Poquelin is for professionals; we do not create accounts for people under 18.
Changes
We update this policy when the service changes. The date at the top of the page is authoritative; a substantial change is announced in the application or by email before it takes effect.