Privacy Policy

This Privacy Policy explains how Betterflag ("Betterflag", "we", "us"), operated by Mehdi Chioukh as a sole proprietorship registered in France (entrepreneur individuel, EI), processes personal data when you visit our website, join the waitlist, create an account, or use the Betterflag platform, dashboard, APIs, SDKs, and MCP server (the "Services"). The registered business address is available on request at hi@betterflag.app.

Two roles matter in this policy. For the personal data of our customers and website visitors (your account, billing, usage, and communications), we act as the controller. For personal data your applications send us inside flag evaluation contexts about your own end users, you are the controller and we act as your processor, handling that data only on your instructions as described in the "End-User Data" section.

Data you provide to us:

• Account data: name, email address, password (as a salted hash), and organization name.
• Billing data: plan, billing address, VAT number where applicable, and transaction history. Card details are collected and stored by our payment processor, never on our servers.
• Configuration data: flags, targeting rules, environments, projects, and API/agent key metadata you create in the Services.
• Communications: emails and messages you send to support or in reply to our emails, and waitlist signups.

Data collected automatically:

• Usage and log data: IP address, browser and device type, pages viewed, API and MCP calls made (endpoint, timestamp, key used), and actions recorded in your account's audit trail, including which human or agent performed each action.
• Evaluation metering: counts and metadata of flag evaluations served to your applications, used for billing and usage display.
• Product analytics: feature usage events collected through PostHog, hosted in the EU, to understand how the product is used and improve it.
• Advertising and conversion data: when you visit our marketing site or join the waitlist, we use the X (Twitter) advertising pixel and X's Conversions API to measure how our advertising on X performs. This can involve X cookies set in your browser and, when you join the waitlist, sharing a hashed (irreversible) form of your email address together with your X click identifier, IP address, and browser user-agent with X, so X can attribute a signup to an ad. We use this only for advertising measurement, and only where consent is required, after you consent.

Where the GDPR or equivalent laws apply, we rely on the following legal bases:

• Performance of a contract: creating and managing your account, serving flag evaluations, metering usage, billing, and providing support.
• Legitimate interests: securing the Services, preventing fraud and abuse, maintaining audit trails, analyzing aggregated product usage to improve the Services, and sending existing customers relevant product updates. You can object to processing based on legitimate interests at any time.
• Consent: marketing emails to prospects (such as the waitlist), advertising and conversion measurement through the X (Twitter) pixel and Conversions API, and any other non-essential cookies or identifiers. You can withdraw consent at any time, including via the unsubscribe link in every marketing email.
• Legal obligation: retaining invoicing and tax records, and responding to valid legal requests.

We do not sell personal data and we do not use Your Data or your end users' data to train machine-learning models.

When your applications evaluate flags, they may send us context attributes about your end users (for example a user identifier, plan, or country) so targeting rules can be applied. For this data, you are the controller and Betterflag is your processor: we process it only to evaluate flags, serve consistent rollouts, meter usage, and secure the Services, and never for our own marketing or profiling.

You decide what attributes to send. Send only what your targeting rules need, and do not send special categories of personal data (such as health or biometric data). A data processing agreement covering this processing, including our subprocessors and the safeguards below, is available on request at hi@betterflag.app.

We share personal data only with service providers who process it on our behalf under contracts that restrict their use of it, and in the limited circumstances described below. Our current subprocessors are:

• Cloudflare (USA, global edge network): hosting, edge delivery of flag evaluations, and security.
• Supabase (EU-hosted project): database and authentication infrastructure.
• Stripe (USA/EU): payment processing.
• PostHog (EU hosting): product analytics.
• Resend (USA): transactional and lifecycle email delivery.
• X Corp. (Twitter) (USA): advertising and conversion measurement for our marketing site, via the X pixel and Conversions API.

We will update this list before adding or replacing subprocessors that process end-user data, giving customers an opportunity to object.

We may also disclose personal data if required by law or valid legal process, to protect the rights, safety, or property of Betterflag or others, in connection with a merger, acquisition, or sale of assets (with notice to you), or with your consent.

We keep primary data storage in the EU where our providers allow it. Some subprocessors process data in the United States or, for edge delivery, in the country nearest the request. Where personal data subject to the GDPR is transferred outside the EEA, UK, or Switzerland, we rely on adequacy decisions (including the EU-U.S. Data Privacy Framework where the recipient is certified) or the European Commission's Standard Contractual Clauses, together with technical measures such as encryption in transit and at rest.

We use a deliberately small set of cookies:

• Essential cookies: session management and authentication for the dashboard. These are required and are set without consent.
• Analytics: product analytics via PostHog. Where consent is required for analytics cookies or identifiers, we ask for it before setting them.
• Advertising: on our marketing site only, the X (Twitter) pixel measures conversions from our advertising on X. Where consent is required for advertising cookies or identifiers, we ask for it before setting them. The dashboard does not use advertising cookies.

You can manage or delete cookies through your browser settings; blocking essential cookies will prevent the dashboard from working.

We retain personal data for as long as your account is active and as needed to provide the Services. Specific periods:

• Account and configuration data: deleted or anonymized within 30 days of account deletion.
• Backups: deleted data may persist in encrypted backups for up to 90 days before being permanently removed.
• Evaluation contexts and request logs: retained in identifiable form only as long as needed for evaluation consistency, metering, and security, then aggregated or deleted.
• Billing and tax records: retained for the period required by applicable accounting and tax law.
• Audit trails: retained for the life of the account as a record of changes to your flags.

We apply technical and organizational measures appropriate to the risk, including encryption in transit (TLS) and at rest, scoped API and agent keys with revocation, access controls and least-privilege administration, audit logging, and incident response procedures. If a personal data breach occurs that is likely to result in a risk to you or your end users, we will notify you and, where required, the competent supervisory authority without undue delay and within the timelines the law requires.

No system is perfectly secure; please use strong, unique passwords and rotate any key you believe may be compromised.

Where the GDPR or equivalent laws apply, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your data, subject to legal retention obligations.
• Restrict or object to processing, including any processing based on legitimate interests and all direct marketing.
• Portability: receive data you provided in a structured, commonly used, machine-readable format.
• Withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, email hi@betterflag.app. We respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority. If your request concerns data processed on behalf of one of our customers (for example, an app you use that uses Betterflag), we will refer your request to that customer, who is the controller of your data.

The Services are not directed to individuals under 16 and we do not knowingly collect personal data from them. If you believe a child under 16 has provided us personal data, contact us at hi@betterflag.app and we will delete it.

We may update this Privacy Policy to reflect changes in our practices or the law. We will post the updated policy on this page and update the "Last updated" date; for material changes, we will also notify account holders by email before they take effect.

For any privacy question, request, or complaint, contact us and we will do our best to resolve it:

• Controller: Mehdi Chioukh, entrepreneur individuel (EI), France
• Email: hi@betterflag.app
• Website: betterflag.app