Privacy Policy
This notice describes what data GPX Excellence processes and how, based on how the system actually works at the time of writing.
Data controller
Company name, registered office address, VAT/tax number and contact details of the data controller: TO_BE_COMPLETED. Any appointed Data Protection Officer (DPO): TO_BE_COMPLETED.
Data we collect
Account data (first name, last name, email, hashed password); the problem text you describe and its technical category; metadata of any declared attachments (name, type, size — at this stage files are not actually uploaded to our servers); messages exchanged within a Ticket; the GPX Credits balance linked to your account; a technical control log (Audit Log) that records action, role and date/time for certain operations — never the original content of your request.
Purposes and legal basis
We process your data to provide the service you request (problem analysis, account management, Credits management) on the basis of contract performance/pre-contractual measures, and for technical security purposes (control log) on the basis of legitimate interest. Other applicable legal bases: TO_BE_COMPLETED.
External AI providers
To technically analyze your problem, an already-minimized version of the text you write may be sent to external AI providers (Anthropic Claude and/or OpenAI), which may process it on servers located outside the European Union. Specific contractual safeguards for this transfer (e.g. Standard Contractual Clauses): TO_BE_COMPLETED.
Hosting and technical infrastructure
The site is hosted on Vercel (application deployment and hosting). The database that stores your data (Neon, PostgreSQL technology) is hosted in the European region (Frankfurt). Transactional emails (e.g. confirmation that a request was received), when active, are sent via the Resend provider.
Payments
At this stage (Beta) no real payment gateway is connected to the site: the GPX Credits shown in your personal area do not correspond to a real purchase that can currently be made online.
Cookies
For details on the cookies used, see our dedicated Cookie Policy.
Data retention
Retention periods for the different types of data have not yet been formally defined: TO_BE_COMPLETED.
Your rights
You can request access, rectification, erasure or restriction of processing of your data, as well as portability where applicable. The channel and timeframe for exercising these rights: TO_BE_COMPLETED.
Security
Passwords are stored only in hashed form, never in plain text. Relevant operations on Tickets and accounts are recorded in a control log that cannot be modified after it is written.
Changes to this notice
This notice may be updated when how the system actually works changes; the date of the last technical revision is shown at the bottom of the page.
Last technical revision: 2026-08-09