Privacy Policy

1. Data Controller

The entity responsible for processing your personal data is the individual enterprise (Entreprise Individuelle - EI) LeakPlug, located at 229 Rue Solférino, 59000 Lille, France.

For any privacy inquiries or to exercise your rights under GDPR, please contact our privacy representative at support@leakplug.app.

2. Scope & Collected Data

LeakPlug is designed to safeguard corporate privacy. We collect and process the following categories of data:

• User Account Details: Email addresses and password credentials required to authenticate access to your analysis reports.
• CSV Transaction Logs: Raw text uploaded through our dashboard scanner. This data is parsed in-memory strictly to extract SaaS vendor names, billing cycle, and billing amounts. We never store raw CSV files permanently on disk or sell your corporate spend details.
• Payment Metadata: Transaction reference identifiers, checkout event details, and subscription tiers. No credit card details are collected directly on our servers.

3. Third-Party Data Processors

We partner with specialized sub-processors to host the platform and process payments:

• Supabase: Cloud database provider used to secure user accounts and parsed subscription metadata.
• Vercel & AWS: Technical hosting infrastructure provider.
• Paddle: Reseller and Merchant of Record managing checkout overlays, billing invoices, and international tax payments.

4. GDPR Rights

Under European General Data Protection Regulations, you have the right to request access to, rectification of, or erasure of your personal data. You may also request data portability or withdraw processing consent at any time by contacting us at support@leakplug.app.