Privacy Policy

Who we are

Novostok CSI (“CSI”, “we”, “us”) is the Crisis Signal Index intelligence service operated by NOVOSTOK, a société par actions simplifiée (SAS) registered in France under SIREN 944 741 644 (intra-EU VAT FR83 944 741 644), with its registered office at Bureau 326, 78 avenue des Champs-Élysées, 75008 Paris, France. For any privacy question or to exercise your rights, contact contact@novostok.com. We are the data controller for the personal data described here.

What we collect

We keep data collection deliberately minimal:

• Account data — your email address, an optional display name, and your authentication credentials (managed by our authentication provider; we never store your password in plain text).
• Preferences — your chosen language and the subscription/access tier associated with your account.
• Email engagement — whether the weekly briefing was delivered, opened, or clicked, used only to maintain deliverability and improve the briefing.
• Technical data — standard server logs (IP address, request time, user agent) retained briefly for security and abuse prevention.
• Cookies — strictly necessary cookies only: a session cookie to keep you signed in and a small cookie to remember your language. We do not use advertising or cross-site tracking cookies.

We do not ask for, or intentionally collect, sensitive personal data, and you should not send any to us. The intelligence content we publish is derived from public and licensed sources, not from your personal data; your personal data is not used to generate analysis and is not sent to our AI processors.

Why we use it (legal bases)

• To create and secure your account and deliver the service you signed up for (performance of a contract).
• To send the weekly intelligence briefing and service messages to subscribers (consent, which you can withdraw at any time via the unsubscribe link in any email).
• To keep the platform secure, prevent abuse, and improve the product (our legitimate interests).
• To comply with legal obligations where they apply.

Processors we rely on

We use a small set of reputable service providers strictly to operate CSI, each bound to protect your data and use it only on our instructions:

• Authentication & database hosting — to manage accounts and store platform data.
• Email delivery — to send the weekly briefing and account emails.
• Server hosting — to run the application.
• AI processing — to analyse public and licensed source content for the index and reports. Subscriber personal data is not included in these requests.

Some providers operate outside your country; where personal data is transferred internationally, it is protected by appropriate safeguards (such as standard contractual clauses). We do not sell your personal data, and we do not share it with third parties for their own marketing.

How long we keep it

We retain account data for as long as your account is active. If you delete your account or ask us to erase your data, we remove it within a reasonable period, except where we must keep limited records to meet legal or security obligations. Server logs are kept only briefly.

Your rights

Subject to applicable law (including the GDPR for EU/EEA users), you may request to access, correct, export, restrict, or delete your personal data, and object to or withdraw consent for certain processing. You can unsubscribe from the briefing at any time using the link in any email. To exercise any right, email contact@novostok.com. You also have the right to complain to your local data-protection authority.

Security

We protect data in transit with encryption, restrict access to authorised operators, keep audited records of administrative actions, and follow least-privilege practices. No system is perfectly secure, but we work to protect your data and to respond promptly to any incident.

Children

CSI is intended for professional, adult users and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

We may update this policy as the service evolves. Material changes will be reflected by the “last updated” date above, and where appropriate we will notify subscribers by email.