Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

• Optimzd
• Matys Beuriot, Founder
• contact@getoptimzd.com
• Paris, France

2. Data We Collect

We collect different types of data depending on how you interact with us:

Waitlist registration

When you sign up for early access, we collect your professional email address. This is used solely to contact you about Optimzd beta access and product updates.

Website analytics

We use Google Analytics to understand how visitors use our website. This includes anonymized data such as pages visited, time on site, device type, and approximate location. We do not use this data to identify individuals.

Application data (for registered users)

When you use the Optimzd application, we access data from your connected accounts (HubSpot CRM and ad platforms like Meta Ads) via OAuth. This data remains yours — we process it only to provide the attribution and analytics services you requested. We also collect your name and email via Google OAuth for authentication.

3. How We Use Your Data

• Provide, operate, and improve the Optimzd service
• Send you product updates and beta access information (waitlist only)
• Analyze website usage to improve user experience
• Generate attribution reports and AI-powered insights from your connected ad and CRM data
• Respond to your inquiries and provide support

4. Third-Party Services

We use the following third-party services to operate Optimzd:

• Google Analytics — Website analytics (anonymized)
• HubSpot — CRM data accessed via your OAuth authorization
• Meta (Facebook/Instagram) — Ad platform data accessed via your OAuth authorization
• Anthropic (Claude AI) — AI analysis of your campaign data (no personal data sent, only aggregated metrics)
• Vercel — Frontend hosting
• Railway — Backend hosting

5. Cookies

We use essential cookies for authentication (httpOnly session cookies) and Google Analytics cookies for anonymized website analytics. We do not use advertising or tracking cookies beyond Google Analytics.

6. Data Retention

Waitlist data is retained until you request removal or the beta period ends. Application data synced from your CRM and ad platforms is retained as long as your account is active. You can request deletion of all your data at any time by contacting us.

7. Data Security

All data is encrypted in transit (TLS/HTTPS) and at rest. CRM credentials are encrypted using industry-standard methods. We follow security best practices including role-based access control, secure authentication, and regular security reviews.

8. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — correct any inaccurate data
• Right to erasure — request deletion of your data
• Right to restriction — limit how we process your data
• Right to data portability — receive your data in a structured format
• Right to object — object to the processing of your data

To exercise any of these rights, contact us at contact@getoptimzd.com. We will respond within 30 days.

9. International Data Transfers

Some of our third-party service providers (Vercel, Railway, Anthropic) are based in the United States. Data transfers to these providers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards as required by the GDPR.

10. Children's Privacy

Optimzd is a B2B service designed for business professionals. We do not knowingly collect data from individuals under 16 years of age.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

contact@getoptimzd.com