Privacy policy

Data controller

OpenIncome ai, Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Contact: by post (c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States).

What we collect

• Site visit : without an account, no advertising and no ad trackers. A cookie-free audience measurement provided by our hosting company counts page views and a few actions (account creation, subscription, reading time and scrolling per type of page), without your e-mail address. Technical server logs (IP address, page requested, date) are used for security and abuse prevention.
• Subscriber account (optional) : your e-mail address, your name or nickname if you give one, your password in hashed form (never in clear text), the two-factor key if you turn it on, your plan and subscription status, and for each use of the assistant, alerts or reports: the date, the type of action and its cost to us (to apply your plan’s limits). A strictly necessary session cookie keeps you signed in for 30 days at most.
• Votes, history and « Read later » (account) : your ▲/▼ votes on events and stories, the list of events and stories you opened (with the date of the first and last visit) and those you saved for later. The number of votes on each topic is public, never who voted. Votes from confirmed accounts influence, within a fixed limit, the order of the « Hottest » ranking.
• Daily activity (account) : to improve the site, we record each day for your account the active reading time (tab visible and in use), the number of pages read, questions asked to the assistant and e-mail alerts sent. These totals do not include the list of pages read and are only used by the site team.
• Followed stories and personalisation (account) : the stories you follow (with the date of your last visit, to flag what is new), the countries and brands you chose and the topics you hid. These choices only adapt the display in your browser; public pages stay the same for everyone.
• Research assistant : your questions and the answers, kept in your history until you delete them (one conversation or the whole history, from the Assistant page) or until your account is deleted. To answer, the text of the question is sent to our AI provider and, for web searches, to our search engine, without your name or email address.
• Personal alerts : the criteria of your alerts (keywords, people, companies, places, categories, followed stories), their frequency, and the results found for you with their e-mail sending date. For alerts extended to the web, the criteria are sent to our search engine, without your name or e-mail address. See also Alerts on people.
• Team plan : the e-mail address of the people you invite, to send them the invitation.
• Financial support : name or pseudonym, email address, amount, frequency, optional message, and your choices for display on the support wall.
• Payment : it is processed by Stripe. We never see or store your card numbers; we only receive payment confirmation and Stripe technical identifiers.
• Admin area : a strictly necessary session cookie, reserved for the site team.

Why

• To process your support, send you a receipt, and manage monthly support (execution of your request).
• Create and secure your account, manage your subscription and its limits, send you service e-mails: address confirmation, password reset, invitations, the alerts you created (performance of the contract).
• To display your name, and if you accept, your amount, on the support wall (your consent, withdrawable at any time). Messages are reviewed before publication.
• To keep our accounts (legal obligation) and protect the site against abuse (legitimate interest).

Your data is not sold, rented, or used for advertising purposes.

Retention period

• Support and payment data: the time necessary for our accounting and tax obligations, up to 10 years.
• Wall display: until you request removal.
• Subscriber account: as long as the account exists; you can delete it yourself from “My account”, which immediately erases the account and its usage history. Invoices and payment data are kept by us and by Stripe for our accounting obligations (10 years at most).
• Reading history: the last 500 visits at most; you can erase it entirely or item by item from « My history ». Votes, « Read later », followed stories, areas and hidden themes: until you remove them (from « Personalise » for the last three). Everything is erased with the account.
• Daily activity: 13 months, then erased automatically; it is also erased when you erase your whole reading history, and with the account.
• Accounts never confirmed: deleted at the latest 30 days after sign-up.
• Server logs: up to 12 months.

Alerts on people

Mecapress alerts are for following the news, not individuals. An alert about a person must target a public figure (business leader, elected official, spokesperson, person already known to the public for their role) and only covers information already published by media, official sources or public accounts. Mecapress does not search for or collect any private information: an alert only points you to articles and events already available to everyone.

Do not use alerts to monitor a private individual (neighbour, colleague, former partner…): it breaches our terms and may breach the law. We may disable an alert that does not follow this rule. Every alert e-mail contains a one-click unsubscribe link; you can edit or delete your alerts at any time from the « My alerts » page, and they are erased with your account.

If you believe you are wrongly targeted by information published on Mecapress, write to us by post (c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States).

Recipients and transfers outside the European Union

Only the publisher and its technical service providers have access to data: our payment provider, our hosting provider, our e-mail delivery service and our AI and web search providers (assistant and web alerts, with no identity data), located in the United States or the European Union. These transfers are governed by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Your rights

You have rights of access, rectification, erasure, restriction, objection and data portability, as well as the right to withdraw your consent. Write to us by post (c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States). You can also complain to the CNIL (cnil.fr).