Privacy policy
How Product VISTA handles personal data for TrustNPS under the GDPR, UK GDPR, and the CCPA.
This language is not published yet. The English text below is the reference until a translation is added.
Who we are
Last updated 31 October 2026.
Product VISTA (24 rue Frédérick Lemaître, 75020 Paris, France) is the controller for founder accounts, billing, the waitlist, and this website. Email pierre@productvista.io.
When a merchant connects Shopify or Stripe, the merchant is the controller of its customers' contact details. Product VISTA is the processor for sending surveys and computing the score. The DPA on this site is the contract for that processing.
What we store
Founders: email address, plan, businesses, an encrypted payment credential, and the attestation that there is a lawful basis to email buyers.
Buyers: email address (encrypted), a hash of that address, payment timing needed to know when a survey is allowed, the score, and an optional comment. We do not ask for a name. We do not show the email on any public page.
Waitlist: email address, whether you opted in, and whether you confirmed.
We do not sell personal information. We do not share it for cross-context behavioural advertising.
Why
Account and billing: contract.
Surveys: we act on the merchant's instructions. The merchant must have a lawful basis. You can unsubscribe in one click. That opt-out stops survey email to your address from every merchant on TrustNPS, not only the merchant who wrote to you.
Product updates: consent only, with a second confirmation email. The checkbox is off until you turn it on.
Security and fraud: legitimate interest.
A suppression record is kept after you unsubscribe so we do not email you again, including surveys from other merchants. That record is the exception to ordinary deletion.
How long
Sign-in links: 7 days. Sessions: 7 days after they expire. Mail logs: 90 days, and the body is redacted in production. Unconfirmed waitlist rows: 30 days. Contact messages: 3 years. Buyer emails: for the life of the merchant account, then deleted with that account, unless you erase them sooner.
Invite records without the email address can remain so we do not send a second survey for the same order.
Your rights
You can ask for access, correction, erasure, restriction, portability, and objection. You can complain to the CNIL in France, or to the ICO if UK GDPR applies.
If you are a buyer and you ask for erasure, we delete your email and your comment. The numeric score is kept, with no email and no comment attached, as an anonymous part of the aggregate.
If you are a merchant, delete the business or the account in the dashboard, or email us.
CCPA notice
If you are a California resident: we collect identifiers (email), commercial information (the fact of a purchase and a survey score), and internet activity limited to essential session use. We do not sell personal information and we do not share it for cross-context behavioural advertising. You may request to know, delete, and correct. We will not discriminate against you for asking.
Transfers
The application runs on Vercel in Frankfurt. Vercel Inc. is a United States company. The database is Neon Postgres in AWS eu-central-1 (Frankfurt), provisioned through the Vercel Marketplace. Card payments for our own fees are processed by Stripe Payments Europe, Limited, in Dublin, Ireland. No email is sent until an email provider is chosen and named on the subprocessors page. Where data leaves the UK or the EEA, the transfer tool is the provider's Standard Contractual Clauses or an adequacy decision.