Privacy policy

This policy describes how Louchebem Software, publisher of RushPilot, processes personal data — those of visitors to this website and its subscribers, as well as those processed on behalf of merchants using the service. It is written to be read: no unnecessary jargon, precise retention periods and verifiable commitments.

1. The essentials

• Primary operational data are hosted in France by Scaleway SAS, Paris region. Limited specialist services, described below, may process certain data within or outside the European Union with the applicable safeguards.
• No data are sold. Service providers and consented advertising measurement are described below.
• Self-hosted audience measurement works without cookies. Meta trackers are activated only with your consent.
• Product-content generation is designed to transmit no end-customer personal data. However, text voluntarily entered in the public assistant is transmitted to an AI provider: do not enter sensitive data there.
• A merchant’s customer data belong to that merchant: Louchebem Software processes them only on their instructions.

2. Who is responsible for what

Louchebem Software has two distinct roles under the GDPR:

• Controller for its own processing: this website, accounts of subscribing merchants and their staff, subscription billing, support and business prospecting.
• Processor (Article 28 of the GDPR) for merchants’ end-customer data (accounts, orders, history): the merchant is the controller, and Louchebem Software acts on their instructions under the data processing agreement. For these data, the applicable privacy policy is the one published on the relevant merchant’s shop; that merchant is your contact for exercising your rights.

3. Data processed by Louchebem Software for its own purposes

Visiting this website

No account or cookie is needed to browse rushpilot.fr. Technical logs (IP address, pages visited, timestamps) are kept for the website’s security and proper operation — legal basis: legitimate interest — and purged within a maximum of 12 months.

Registration and free trial

At registration: shop name, identity and contact details of the person responsible, trade(s), login credentials (password stored as a hash). Legal basis: performance of the contract (provision of the trial, then the service). Trial accounts that do not convert are retained for 12 months after the trial ends, then deleted.

Demo or contact request

Name, contact details and message content, to get back to you. Legal basis: pre-contractual steps. Retention: 12 months.

Public assistant

Messages entered in the website assistant, its responses and a random conversation identifier are processed to answer your questions and enable the sales follow-up you request. Legal basis: pre-contractual steps when you are preparing to contact us, and legitimate interest in presenting the service in other cases. Content is transmitted to OpenRouter and then to the selected model provider. Routing is configured to reject providers that collect requests for training and to require no retention where that option is available. Do not provide sensitive data or data about a third party. Conversations are retained for 12 months.

Subscription and billing

Company name, billing details and billing history. Payments are processed by a secure payment provider (Stripe): Louchebem Software stores no payment-card data. Legal bases: performance of the contract and accounting obligations (document retention: 10 years).

Business prospecting

Louchebem Software may contact food-trade professionals (public business contact details or details collected with consent). Newsletter registration always relies on an opt-in that is never preselected, with timestamped evidence of consent and one-click unsubscribe in every message. Retention: 3 years after the last contact.

4. Data processed on behalf of merchants

As part of the service, Louchebem Software processes, as a processor:

• end-customer data: identity, contact details, accounts, orders, collection slots, purchase history and preferences;
• the merchant’s staff data: user accounts, roles and linked operational records (for example, who carried out a hygiene check in the HACCP module).

This processing is governed by the data processing agreement: purposes and retention periods defined by the merchant, strict isolation between merchants, tools for exercising rights (export, rectification, actual erasure) and complete deletion at the end of the contract.

5. Artificial intelligence

The service uses AI models to generate content (product descriptions, shop texts and visuals). For these functions, requests are limited to catalogue content and product context: end customers’ names, emails, phone numbers and addresses are not transmitted.

OpenRouter routes text- and image-analysis requests to Anthropic models, with routing restricted to providers that do not retain requests or use them to train their models; the model may be served by its publisher or a third-party host subject to the same requirement. Google is accessed directly for product-image generation. OpenRouter is also used for the public assistant described in Article 3 and, in some ambiguous cases, to identify a business contact address already published on a prospect’s website. This last processing is based on Louchebem Software’s legitimate interest in contacting professionals and respects the right to object.

6. Cookieless audience measurement

Audience measurement for shops (and, when active, this website) is developed internally and designed according to the CNIL’s criteria for exemption from consent: no cookie or tracker is placed, and no tracking across websites. Umami runs on a self-hosted instance. The IP address is never recorded: it is used only in memory to calculate an anonymous daily identifier (the calculation salt is destroyed every night). Raw anonymous events are purged after 90 days; only anonymous statistical aggregates are retained.

Advertising measurement with your consent

If you accept Meta advertising measurement, the Pixel and Conversions API measure public-page visits, confirmed demos, trial accounts created, contact-form messages and the first subscription payment. The amount transmitted is the amount actually collected in euros, including tax.

The data transmitted to Meta Platforms Ireland are the event type and date, a public path with no token or fragment, advertising identifiers _fbp and _fbc when available, the IP address of Pixel calls, browser information and a hashed pseudonymous identifier. No name, email, telephone number, message, password or payment-card data is transmitted through this measurement. Meta may match these events to your account through its own processing, including outside the European Union, under its privacy policy.

Legal basis: your consent. Accepting and refusing are equally easy; you can withdraw consent through “Manage cookies” in the footer. Your choice is retained for a maximum of six months; local advertising identifiers for a maximum of three months. Evidence of the choice and the technical sending queue are retained for no more than three months after their expiry or processing. Withdrawal invalidates conversions still pending.

Our Umami audience measurement also receives conversion events (confirmed demo, trial start, contact and first confirmed payment) and the tax-inclusive amount of this first payment collected. After advertising consent, campaign and creative labels allow their contribution to be measured; they are retained until payment, within the limits of consent. Without valid consent, the event remains unattributed. No name, email, telephone number, account identifier, invoice or card data is transmitted in these events. The first-payment register prevents duplicates and provides the sales summary; pending-payment labels are deleted upon withdrawal.

7. Recipients and service providers

Data are accessible only to authorised Louchebem Software personnel and the following providers, each solely for its assigned task:

• Scaleway SAS — primary hosting, databases and storage, France;
• Backblaze — backups encrypted before transfer, EU region (Central Europe);
• Brevo (a French company) — sending transactional emails and newsletters;
• Google Workspace / Gmail — business email and support or sales communications;
• Sentry — technical error monitoring, with ingestion configured in Germany and URL minimisation;
• NeverBounce (ZoomInfo) — verification of business email addresses for prospecting;
• Stripe — subscription-payment collection (once billing is activated);
• OpenRouter and the selected model provider (Anthropic models, served by their publisher or a third-party host) — text- and image-generation and analysis on the content described in Article 5, the public assistant and occasional help identifying a business contact, with routing configured for no collection or retention;
• Google — product-image generation via direct access;
• Umami and DocuSeal — software self-hosted on Louchebem Software’s infrastructure, for audience measurement and document signing respectively.

The detailed list, with applicable safeguards, is set out in the data processing agreement. Where a provider outside the European Economic Area may receive personal data, the transfer is covered by an applicable adequacy decision or the European Commission’s standard contractual clauses, depending on the provider and transfer concerned.

8. Retention periods

• Subscriber accounts (merchants, staff): contract term, then deletion within 90 days of termination;
• Trial accounts that do not convert: 12 months after the trial ends;
• Accounting documents: 10 years (legal obligation);
• Demo and contact requests: 12 months;
• Consent evidence: 3 years after the relationship ends;
• Security logs: maximum 12 months;
• Public-assistant conversations: 12 months; technical logs relating to other AI calls (pseudonymised): 30 days;
• Raw audience-measurement data: 90 days (anonymous aggregates thereafter);
• Backup copies: expiry no later than 60 days after deletion of production data.

9. Security

Main measures: encryption of communications (TLS) and data at rest, database accessible only through a private network, strict isolation of each merchant’s data at database level (Row-Level Security), the principle of least privilege, hashed passwords, daily encrypted off-site backups, sensitive-event logging and continuous monitoring. In the event of a data breach presenting a risk, individuals and the CNIL are informed in accordance with Articles 33 and 34 of the GDPR.

10. Your rights

You have rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent at any time for processing based on it.

• If you are a subscribing merchant, prospect or visitor to this website: write to bonjour@rushpilot.fr. Response within one month at most.
• If you are a customer of a shop using RushPilot: contact the relevant merchant, the controller of your data (contact details in their shop’s legal notice). Louchebem Software provides technical assistance to help them respond.

If, after contacting us, you believe your rights are not being respected, you may contact the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr).

11. Cookies and trackers

The rp_marketing_choice cookie remembers your privacy choice for a maximum of six months. It is necessary to respect that choice. Meta advertising cookies _fbp and _fbc are placed only after your consent. Application authentication mechanisms remain strictly necessary for their operation.

You can accept or decline advertising measurement in one click, or save your preference through the banner. The “Manage cookies” button in the footer lets you change your choice at any time. Cookie-free audience measurement and essential cookies remain independent of this choice. Advertising uses and the Meta partner are detailed under Advertising and conversions.

12. Updates to this policy

This policy is dated and may change with the service. Any material change is brought to subscribers’ attention. Current version: 3 October 2026.