Account and service
Identity, contact and company details, sessions, studies and boundaries — performance of the contract.
Privacy policy
Version dated 24 August 2026
Atlas Tech Solutions protects personal data processed by GeoAlt under the GDPR and French data protection law.
Data, purposes and legal bases
Payment and accounting
Billing details, subscription and entries — performance of the contract and legal obligations.
Security and improvement
Minimal technical logs and metrics — legitimate interest in securing and improving GeoAlt.
Audience measurement
Public pages, device and approximate location through Vercel Web Analytics — only with your consent.
GDPR requests
Request type, status and minimal outcome — legal obligation to respond and retain evidence.
Retention periods
| Category | Duration |
|---|---|
| Sessions and login data | Session expiry, then deletion within 30 days |
| Unverified accounts | Deleted 3 months after signup without a verified email |
| Studies, boundaries and settings | Account lifetime; deleted with the account |
| Previews and public shares | 90 days (preview) or 180 days (agency share), then deletion |
| Technical metrics and security logs | 12 months |
| Performance measurements (Web Vitals) | 90 days |
| Tool and server errors | 90 days |
| Tool quality events | 180 days |
| Consent records | Choice valid for 6 months; evidence retained for 5 years |
| Data subject requests | 5 years after closure |
| Invoices and accounting records | 10 years from the end of the financial year |
Controller and contact
Atlas Tech Solutions is the data controller. To exercise your rights or ask a question: support@geoalt.fr.
Recipients and processors
Vercel hosts the application, provides Analytics and file storage (Blob); Neon hosts PostgreSQL; Stripe processes payments; Google (Gmail SMTP) delivers transactional emails, which contain your address. The national public-data providers of each covered country (IGN, AHN, swisstopo…) receive technical request parameters, but not your GeoAlt profile.
Location and transfers outside the EEA
The database and application runtime are operated within the European Economic Area (Frankfurt and Paris). Vercel, Neon and Stripe may process some data in the United States as part of their services; such transfers are covered by their data processing agreements, Standard Contractual Clauses and applicable safeguards. Configured regions and subprocessors are reviewed annually.
Vercel Web Analytics
Analytics remains disabled before consent. Vercel describes a measurement system without advertising cookies, using an ephemeral visitor identifier and aggregated data. GeoAlt excludes account, admin, authentication and API routes and strips query parameters. This measurement is not claimed to be anonymous in an absolute sense. Web Vitals (technical performance: loading, interactivity) are collected to our own servers under the same consent, with no advertising identifier; collection stops immediately upon refusal and measurements are purged beyond 12 months.
Your rights
You have rights of access, correction, portability, erasure, restriction and objection, and may withdraw consent at any time. The account area provides correction, export and deletion. Requests are answered within one month unless a lawful extension is explained.
Complaint and security
You may complain to the CNIL at cnil.fr. GeoAlt applies access control, encryption in transit, password hashing, per-user isolation and logging of sensitive mutations. No automated decision produces legal effects.
Updates
Material changes are announced in the service. Fresh consent is requested if Analytics purposes change.