Your data

Privacy policy

This policy explains what WEMADE collects through GetInTheAnswer, why it is needed and the choices available to you.

Last updated: August 18, 2026

Data controller

WEMADE, 41 rue Fongate, 13006 Marseille, France, is the controller of personal data processed through GetInTheAnswer. Privacy requests can be sent to gregory@wemade.fr.

Data we process

  • Business profile information: company name, work email, website, city, industry and services.
  • Report information: questions, public AI answers, visibility metrics, recommendations and public website audit results.
  • Billing references: Stripe customer, checkout and subscription identifiers. WEMADE does not receive full payment-card details.
  • Technical information: IP address, request logs, security signals and optional analytics data.

Purposes and legal bases

  • Generate, store and deliver requested reports, and administer subscriptions: steps before entering into a contract and performance of the contract.
  • Protect the service, prevent excessive scans and diagnose incidents: WEMADE's legitimate interests in security and service reliability.
  • Meet accounting, tax and legal duties: compliance with legal obligations.
  • Measure audience and improve the product through Google Analytics: consent, which can be refused or withdrawn at any time.

Recipients and service providers

Access is limited to WEMADE and providers needed to operate the service: Railway for hosting, Stripe for payments, and the AI or website-analysis providers made available for a scan, which may include OpenAI, Anthropic, Perplexity and Firecrawl. Google receives analytics data only after consent.

Some providers process data in the United States or other countries outside the European Economic Area. These transfers rely on an applicable adequacy decision, the EU–US Data Privacy Framework where available, or European Commission standard contractual clauses.

Retention

  • Free reports and their business contact data are retained while the report remains available or until a valid deletion request is completed.
  • Paid report data is retained for the subscription relationship and then for the period needed to handle claims and legal obligations.
  • Invoices and accounting records are retained for the legally required period.
  • Security and technical logs are retained only for the period reasonably needed to investigate incidents and operate the service.
  • Analytics consent is stored locally in the browser until it is changed or browser storage is cleared.

Cookies

GetInTheAnswer uses an essential, HttpOnly billing cookie after checkout so the subscribing browser can securely open Stripe's customer portal. It expires after 90 days. Google Analytics scripts and cookies are loaded only after the visitor accepts them.

Your rights

Depending on the processing, you may request access, correction, deletion, restriction or portability of your data, object to processing based on legitimate interests, and withdraw consent at any time. Send a request to gregory@wemade.fr or to WEMADE at the postal address above. You may also lodge a complaint with the CNIL.