Privacy statement
DirectoryFast is operated by Accura (France), the data controller for the personal data described below. Questions about anything on this page go to danny@accura.dev.
Section 1 - What we collect
When you create an account. Your name, your email address, and either a password hash or the identifier returned by Google if you sign in that way. We never see your Google password.
When you subscribe. Your billing details are collected and held by our payment provider, not by us. We receive back the subscription's status, plan and renewal date, and the customer identifier that ties them to your account. We do not receive or store your card number.
When you use the product. The directories, categories, listings and articles you create, plus the searches visitors run on your published sites and the outbound clicks they make. Visitor analytics are aggregated and hold no identifier that would let us or you recognise an individual visitor; IP addresses used for rate limiting are salted and hashed, never stored in the clear.
When you browse. Our servers receive your IP address and user agent, as any web server does, and use them to serve the request, apply rate limits and detect abuse.
Email. With your consent, we may email you about the product. Every such email carries a way to stop receiving them.
Section 2 - Why we process it, and on what basis
To provide the service you asked for, which is the performance of our contract with you: your account, your directories, and their publication.
To take payment and meet our accounting obligations, which is a legal obligation for the invoicing part.
To keep the service working and safe, which is our legitimate interest: rate limiting, abuse detection, error diagnosis.
To send you product email, which is your consent, withdrawable at any time.
Section 3 - Consent, and how to withdraw it
Where we rely on your consent, you may withdraw it at any time by writing to danny@accura.dev. Withdrawing consent does not affect processing already carried out, and does not stop us doing what the contract or the law requires.
Section 4 - Who processes data on our behalf
The service could not run without the providers below. Each is a processor acting on our instructions, and each publishes its own privacy terms.
- Vercel Inc. hosts the application and serves it.
- Supabase Inc. hosts the PostgreSQL database where your account and your directories live.
- Polar Software Inc. processes payments and holds the billing details that go with them.
- Resend delivers transactional email, such as address verification and password resets.
- Google LLC authenticates you, and only if you choose to sign in with Google.
- Notion Labs Inc. stores the articles published on this blog. No customer data is sent there.
- Exa and Firecrawl are used by the research pipeline to find and read public web pages when you ask an agent to research a niche. They receive the search terms and the URLs, not your account data.
- OpenAI or the Vercel AI Gateway, depending on configuration, generate text when you use an AI feature. They receive the prompt and the content being worked on.
Some of these providers are established outside the European Union. Transfers rely on the European Commission's standard contractual clauses or on an adequacy decision, depending on the provider.
Section 5 - What we do not do
We do not sell your personal data. We do not share it with advertisers. We do not run third-party advertising or tracking scripts on this site.
Section 6 - How long we keep it
Your account and the directories attached to it are kept while your account exists. Delete your account and they are deleted with it, except where we must keep something longer, such as invoices for the period French accounting law requires. Aggregated analytics that identify nobody may be kept beyond that.
Section 7 - Your rights
Under the GDPR you may ask us for access to your personal data, for its correction or erasure, for a restriction on how we use it, or for a copy in a portable format. You may object to processing based on legitimate interest. Write to danny@accura.dev and we will answer within one month.
If you think we have handled your data badly, you may complain to the Commission Nationale de l'Informatique et des Libertes (CNIL), the French supervisory authority, or to the authority in the country where you live.
Section 8 - Cookies
We set the cookies needed to keep you signed in and to keep the service secure. We do not set advertising or third-party tracking cookies, which is why there is no consent banner on this site.
Section 9 - Changes to this statement
We may update this statement. The date below changes when we do, and a material change will be announced by email to account holders before it takes effect.
Section 10 - Language
This statement is published in French and in English. The French version prevails; the English one is a translation offered for convenience.
Section 11 - Contact
Accura, France. danny@accura.dev.