Holo

Privacy policy

What Holo stores, what it never stores, how long it keeps it, who it is shared with, and the rights you hold over it.

Last updated

Data controller

The data controller is Justin Deboves, entrepreneur individuel (EI), trading as Aloha Pixel, 6 rue des Metairies, porte 002, 64230 Poey-de-Lescar, France. For any question about this policy or to exercise your rights, write to contact@alohapixel.com or call 09 85 03 43 20.

What we collect

Three things, and only three. Your email address, given when you create an account. The sites you declare, meaning their domain and the public URLs listed in their sitemap. The measurements we take: load time before preheating, load time after, HTTP status, and the date of the run. For a paid plan, our payment provider also holds the billing details you give it.

What we never collect

We never store the content of your pages: no HTML, no text, no images, no personal data belonging to your own visitors. We hold no access to your server, your admin or your database, and we ask for none. We do not use your data to train models and we sell nothing to anyone.

Why we process it

Your email address identifies your account and carries the sign-in link, service notices and, if you have subscribed to it, the newsletter. The declared sites and their measurements are the service itself: without them there is nothing to preheat and nothing to prove. Billing data exists to issue an invoice, which the law requires us to do.

How long we keep it

Account data lives as long as your account does, and is deleted within thirty days of its closure. Measurements are kept for the history window of your plan, then deleted. Invoices and accounting records are kept for ten years, as required by French commercial law. Newsletter subscriptions are kept until you unsubscribe.

Who we share it with

Only the processors needed to run the service, each bound by a data processing agreement: Cloudflare, Inc. for hosting and network, our payment provider for cards and invoices, and our email provider for sign-in links and service messages. Nothing else, and never for money. We disclose data to an authority only where a legal obligation requires it.

Where it is processed

The service is hosted on a network of European points of presence. Some of our processors are established in the United States and may process data there under the safeguards provided by European law, including standard contractual clauses. The list of processors and their locations is available on request.

Cookies

The public site sets no advertising or tracking cookie, and there is nothing to consent to. Once signed in, a single technical cookie keeps your session open, and a second remembers your chosen language. Both are strictly necessary for the service to work and neither follows you anywhere else.

Security

Traffic is encrypted in transit. Sign-in uses one-time links rather than passwords, so there is no password of yours for anyone to steal from us. Access to production data is limited to the publisher. Any personal data breach likely to create a risk for you is notified to the supervisory authority within seventy-two hours and to you where the law requires it.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to a processing based on our legitimate interest. Write to contact@alohapixel.com: we answer within one month. If our answer does not satisfy you, you may lodge a complaint with the Commission nationale de l'informatique et des libertes, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

A question about this document? Write to contact@alohapixel.com or call us: a human answers within one business day.