Privacy Policy

Data Controller

The data controller responsible for your personal data is Defense Tech Atlas.

What Data We Collect

We collect only the data necessary to provide and improve our service:

• Account data — when you sign up, we collect your email address and a hashed password (via Supabase Auth). You may optionally provide a display name.
• Payment data — when you subscribe, payment processing is handled by Stripe. We do not store credit card numbers. Stripe receives your billing information and shares only the payment status with us.
• Usage data — we use Vercel Analytics to collect anonymised page-view statistics (page URL, referrer, browser type, country). This data is aggregated and cannot identify you individually.

People Listed in the Directory

Defense Tech Atlas is a public index of the defense tech ecosystem. Founder and fund-partner profiles are built from publicly available professional information, not from data you give us:

• Sources — company websites, press releases, public professional profiles such as LinkedIn, and public government databases. Every profile cites its sources.
• Data — name, role, location, prior companies, companies founded, fund affiliations, and links to public profiles. We do not collect private contact details or sensitive categories of data.
• Purpose — a sector index for analysts, investors, and journalists.
• Legal basis — legitimate interest (GDPR Article 6(1)(f)). The information is professional, already public, and used in a B2B context.
• Retention — profiles are reviewed at least once a year and updated or removed when they are no longer accurate.
• Your rights — if you are listed, you can ask for access, correction, or deletion, and you can object to the processing, using the contact email below. We do not sell this data to data brokers.

Legal Basis for Processing

We process your data on the following legal bases:

• Contract performance — account creation and payment processing are necessary to deliver the subscribed service.
• Consent — non-essential cookies.
• Legitimate interest — anonymised analytics to improve the site and detect technical issues.

Cookies

We use essential cookies for authentication (Supabase Auth session management). These are strictly necessary for the service to function. No tracking, advertising, or third-party cookies are used.

Vercel Analytics uses a lightweight, privacy-friendly approach that does not rely on cookies or collect personal data.

Data Sharing

We share data only with essential sub-processors:

• Supabase (Frankfurt, Germany) — authentication and database hosting. Supabase is DPA-compliant.
• Stripe (US) — payment processing. Stripe is PCI-DSS certified and DPA-compliant under Standard Contractual Clauses.
• Vercel (Frankfurt, Germany) — hosting and analytics. Vercel is DPA-compliant.

We do not sell your personal data to third parties.

Data Retention

We retain your account data for as long as your account is active. After account deletion, data is purged within 30 days. Payment records are retained for the duration required by tax law (5 years in France). Analytics data is retained for 12 months.

Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of access — request a copy of your data.
• Right to rectification — correct inaccurate data.
• Right to erasure — request deletion of your data.
• Right to restriction — limit processing of your data.
• Right to data portability — receive your data in a structured format.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at the email address below. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (in France: CNIL).

Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews of our sub-processors.

Contact

For any privacy-related inquiries or to exercise your GDPR rights:
remysreadings@gmail.com