Privacy Policy
Last updated: August 31, 2026
This Privacy Policy explains how Pudlowska SAS ("we," "us") collects and uses personal data when you visit utm-assistant.ai or use our products, and describes your rights under the GDPR and the CCPA.
Who we are
Pudlowska SAS (SIRET 833 743 271 00037), 7 rue des Dardanelles, 75017 Paris, France. Contact: legal@utm-assistant.ai
Publisher & hosting provider
This website and the Service are published by Pudlowska SAS. The director of publication is Fleur PUDLO.
The Service is hosted by Google LLC, operator of Google Cloud Platform, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Data Protection Officer
You can reach our Data Protection Officer directly at dpo@utm-assistant.ai.
Data we collect
Depending on how you interact with us, we collect:
- Website visitors: standard analytics data via Google Analytics 4, collected in accordance with your cookie choices — see our Cookie Policy.
- Account holders: name, email, and organization details you provide when creating an account, and billing details processed by our payment provider, Stripe (we do not store full card numbers).
- Product usage: the rules and configuration you set up in Inflight. Where you use Inflight to process your own website visitors' data, the UTM parameter values and IP addresses that pass through the product on your behalf are handled as described in our Data Processing Addendum, not this Policy.
How we use it
To operate and improve the Service, to communicate with you about your account, to process payments, and to comply with our legal obligations.
Legal basis (GDPR)
We rely on contract necessity for account and billing data, consent for non-essential cookies and analytics, and legitimate interest for service security and improvement.
Who we share it with
We use the following sub-processors: Google Cloud Platform / Firebase (hosting, authentication, infrastructure), Stripe (payments), Google Analytics (site analytics), and our cookie consent management provider. We do not sell personal data.
International transfers
Some of our sub-processors process data outside the EEA. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses.
Retention
We retain account data for as long as your account is active, plus a reasonable period after closure for legal and accounting purposes. Billing records are retained as required by French law.
Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to lodge a complaint with the CNIL. Under the CCPA, you have the right to know, delete, and correct your personal data, and to opt out of the sale or sharing of personal data — we do not sell personal data. To exercise any of these rights, contact our Data Protection Officer at dpo@utm-assistant.ai.
Cookies
See our Cookie Policy for details on what we use and how to control them.
Changes to this Policy
We may update this Policy from time to time. We will notify you of material changes.