Privacy Policy
Version dated 28 September 2026
This policy explains how Submello processes personal data, including through its extension and cookies. The controller is Baton Jules — EI, whose contact details appear in the legal notice.
Account and reminders — performance of the contract
We use your email, account identifier, name if supplied, language, subscription details and preferences to sign you in, display your account and send requested reminders. Email and the details needed for reminders are required for these functions; your profile name is optional. When you use Google sign-in, we receive the profile information authorised for sign-in, not your Google password.
Payment and support
Stripe identifiers and payment status are used to activate Pro and handle purchase requests (contract performance). Accounting records are processed to comply with legal obligations. Contact details and messages are used to answer your request: pre-contractual steps, contract performance or our legitimate interest in responding, depending on its purpose. Withdrawal requests and acknowledgements are processed to respect your rights and retain evidence of handling. Submello does not store payment card numbers.
Security — legitimate interests
Abuse counters, request identifiers, delivery records and technical logs protect the service, investigate errors and prevent duplicate handling. Email and IP hashes used for abuse prevention do not necessarily make that data anonymous. We do not sell data or use it for targeted advertising.
Analytics — consent
With your permission, Google Analytics measures public page visits and traffic sources. You may refuse or withdraw permission through cookie preferences without losing access to the service. Account pages, messages and subscription details are not intentionally sent in these events. See the Cookies section below for trackers and their lifetimes.
Chrome extension
At your request, the extension scans the active page locally. It sends only the subscription details you confirm, not the HTML, full page text or form fields. The service domain is stored without paths or query parameters. Tokens remain in local extension storage without Chrome sync. Drafts remain in memory during the browser session. You can revoke access in Submello settings.
Service providers and recipients
The operator accesses data needed to operate the service and provide support. OVH hosts the application; Supabase manages authentication, profiles, saved subscriptions and reminder records; Resend receives email recipients and message content; Stripe processes payments and their records; Google provides user-selected sign-in and, with consent, analytics. OVH forwarding for contact@submello.com passes messages to a mailbox whose provider still needs to be documented. Data shared is limited to each service’s role.
Location and international transfers
The primary database for the Submello Supabase project is hosted in eu-west-1 (Ireland), verified on 28 September 2026. This does not mean all provider processing stays in the EU: support, subprocessors, payment, email and analytics services may involve third countries. Providers publish processing agreements and transfer mechanisms, including standard contractual clauses where relevant. Documents are linked below; safeguards applicable to Submello accounts and other configured regions still need verification before finalisation.
Retention
Account and subscription data is retained for the relationship, then deleted or limited to what is needed for legal obligations or legal claims. Messages, delivery records, logs and backups require separate retention periods: the purge schedule and provider retention periods still need to be finalised. Expired abuse counters are purged by the application’s daily process. We do not promise immediate deletion of every copy held by every provider.
Your rights and how to exercise them
Subject to GDPR conditions, you have rights of access, rectification, erasure, restriction, objection and portability. You may withdraw analytics consent at any time. Write to contact@submello.com from your account email with your request. We may require proportionate identity verification. The usual response deadline is one month; a lawful extension may apply, with notice to you. Some documents may be retained for legal obligations or claims. You may complain to the CNIL (cnil.fr) or your competent supervisory authority.
Automated decisions
Date calculations and local extension detection help prepare reminders. You review details before saving. Submello does not make automated decisions producing legal or similarly significant effects on you.