Last updated: May 27, 2026
Privacy Policy
Pastel ("we", "us", or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data when you visit heypastel.com or use the Pastel platform.
1. Who We Are
Pastel is an AI-driven B2B sales intelligence platform that monitors real-time intent signals across social networks to help businesses identify and engage high-intent leads.
Data Controller: PASTEL SASU
Address: 7 Parvis Alan Turing, 75013 Paris, France
Contact: hello@heypastel.com
2. Information We Collect
2.1 Information you provide directly to us
We collect information you provide directly when you interact with us:
- Account Data: Email address, name, password, and company details when you register.
- Billing Data: Payment card details and billing address (processed securely by our payment provider).
- Communication Data: Messages you send us via support channels or email.
2.2 Information collected automatically
When you visit our website or use the platform, we collect certain usage data automatically through third-party analytics tools:
- Device & Connection Data: IP address, browser type, operating system, and approximate location.
- Usage Data: Pages visited, time spent, referral source, scroll depth, and interaction with features.
- B2B Identification: The company or organization associated with your IP address (via Reb2b).
2.3 Information processed on behalf of customers (Social Data)
As a core part of our service, Pastel acts as a Data Processor by monitoring publicly available social media content (e.g., LinkedIn, Twitter/X, Reddit). We analyze public posts and comments to identify business intent signals.
We process this public data strictly to surface relevant B2B leads for our customers. We do not use this data for our own marketing purposes, and we only process data that users have explicitly chosen to make public on third-party networks.
3. How We Use Your Information & Legal Basis (GDPR)
We process your personal data for the following purposes and legal bases:
| Purpose | Data Categories | Legal Basis |
|---|---|---|
| Providing the Pastel platform and managing your account | Account Data, Billing Data | Performance of a Contract |
| Sending product updates and marketing emails | Account Data (Email) | Consent / Legitimate Interest |
| Analyzing website usage and improving our product | Device & Usage Data | Legitimate Interest |
| B2B identification of site visitors | IP Address, Usage Data | Legitimate Interest |
4. Data Sharing and Subprocessors
We do not sell your personal data. We share your information only with trusted service providers who process data strictly on our behalf:
Stripe
Payment processing. Your payment and billing information is processed securely by Stripe.
Supabase
Database hosting and authentication. Your data is stored securely in a managed PostgreSQL database.
Resend
Email delivery. Used for sending transactional emails and marketing updates.
Reb2b
B2B website analytics. Identifies companies visiting our site by matching IP addresses.
PostHog
Product analytics. Helps us track feature usage and improve the user experience.
5. International Transfers
Your data may be processed in countries outside the European Economic Area (EEA), including the United States, by our service providers. When this occurs, we ensure appropriate safeguards are in place, relying on mechanisms such as the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs).
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy.
- Account Data: Retained for the duration of your active subscription and up to 12 months after account closure.
- Marketing Data: Retained until you withdraw consent or unsubscribe.
- Usage Data: Retained for up to 24 months for analytics purposes.
7. Data Security
We implement robust technical and organizational measures to protect your data, including TLS/HTTPS encryption in transit, AES-256 encryption at rest, strict access controls, and regular security audits. While we strive for maximum security, no internet transmission is 100% secure.
8. Your Rights (GDPR & CCPA)
Depending on your location, you possess several rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request deletion of your data ("right to be forgotten").
- Right to Restrict Processing: Request limits on how we process your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw previously given consent at any time.
To exercise these rights, please email us at hello@heypastel.com. We will respond to your request within 30 days.
9. Children's Privacy
Pastel is a B2B platform strictly intended for business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us for immediate deletion.
10. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy here and, if you are a registered user, sending an email notification.