Privacy statement

DirectoryFast is operated by Accura (France), the data controller for the personal data described below. Questions about anything on this page go to dany@accura.dev.

Section 1 - What we collect

When you create an account. Your name, your email address, and either a password hash or the identifier returned by Google if you sign in that way. We never see your Google password.

When you subscribe. Your billing details are collected and held by our payment provider, not by us. We receive back the subscription's status, plan and renewal date, and the customer identifier that ties them to your account. We do not receive or store your card number.

When you use the product. The directories, categories, listings and articles you create, plus the searches visitors run on your published sites and the outbound clicks they make. Visitor analytics are aggregated and hold no identifier that would let us or you recognise an individual visitor; IP addresses used for rate limiting are salted and hashed, never stored in the clear.

When you browse. Our servers receive your IP address and user agent, as any web server does, and use them to serve the request, apply rate limits and detect abuse.

Email. With your consent, we may email you about the product. Every such email carries a way to stop receiving them.

Section 2 - Why we process it, and on what basis

To provide the service you asked for, which is the performance of our contract with you: your account, your directories, and their publication.

To take payment and meet our accounting obligations, which is a legal obligation for the invoicing part.

To keep the service working and safe, which is our legitimate interest: rate limiting, abuse detection, error diagnosis.

To send you product email, which is your consent, withdrawable at any time.

Section 3 - Consent, and how to withdraw it

Where we rely on your consent, you may withdraw it at any time by writing to dany@accura.dev. Withdrawing consent does not affect processing already carried out, and does not stop us doing what the contract or the law requires.

Section 4 - Who processes data on our behalf

The service could not run without the providers below. Each is a processor acting on our instructions, and each publishes its own privacy terms.

• Vercel Inc. hosts the application and serves it.
• Supabase Inc. hosts the PostgreSQL database where your account and your directories live.
• Polar Software Inc. processes payments and holds the billing details that go with them.
• Stripe, Inc. processes payments made to a directory owner by their own advertisers, when that owner has connected a Stripe account. We never see those card details and never hold that money: the owner is the seller, and their account is where it lands. What reaches us is the fact of a payment, its amount, and the reference tying it to the placement it bought.
• Resend delivers transactional email, such as address verification and password resets.
• Google LLC authenticates you, and only if you choose to sign in with Google.
• Notion Labs Inc. stores the articles published on this blog. No customer data is sent there.
• PostHog measures how the product itself is used: pages viewed, and a small number of declared events such as creating an account. It runs on PostHog's EU infrastructure and in cookieless mode — nothing is written to your device, and the identifier it works with is a short-lived hash computed on PostHog's servers, which cannot follow you to another site or across days. It is not loaded on the published directory sites.
• Functional Software Inc. (Sentry) records server errors so we can fix them. An error report carries the exception, the code path that threw and the deployed version. It is configured not to attach cookies, request headers or IP addresses, and there is no error-reporting code in your browser or on the directory sites.
• Exa and Firecrawl are used by the research pipeline to find and read public web pages when you ask an agent to research a niche. They receive the search terms and the URLs, not your account data.
• OpenAI or the Vercel AI Gateway, depending on configuration, generate text when you use an AI feature. They receive the prompt and the content being worked on.

Some of these providers are established outside the European Union. Transfers rely on the European Commission's standard contractual clauses or on an adequacy decision, depending on the provider.

Section 5 - What we do not do

We do not sell your personal data. We do not share it with advertisers. We run no advertising script, and nothing here follows you to another site. The one measurement script this site loads is described in section 4: it is cookieless, it stores nothing on your device, and it is absent from the published directory sites.

Section 6 - How long we keep it

Your account and the directories attached to it are kept while your account exists. Delete your account and they are deleted with it, except where we must keep something longer, such as invoices for the period French accounting law requires. Aggregated analytics that identify nobody may be kept beyond that.

Section 7 - Your rights

Under the GDPR you may ask us for access to your personal data, for its correction or erasure, for a restriction on how we use it, or for a copy in a portable format. You may object to processing based on legitimate interest. Write to dany@accura.dev and we will answer within one month.

If you think we have handled your data badly, you may complain to the Commission Nationale de l'Informatique et des Libertes (CNIL), the French supervisory authority, or to the authority in the country where you live.

Section 8 - Cookies

We set the cookies needed to keep you signed in and to keep the service secure. We set no advertising or tracking cookie. Our analytics is configured to write nothing at all to your device — no cookie, no local storage — which is why there is no consent banner on this site.

Section 9 - Changes to this statement

We may update this statement. The date below changes when we do, and a material change will be announced by email to account holders before it takes effect.

Section 10 - Language

This statement is published in French and in English. The French version prevails; the English one is a translation offered for convenience.

Section 11 - Contact

Accura, France. dany@accura.dev.