1. Who we are
Turnout is a service of Simon Leboucher EI, a French sole proprietorship (entrepreneur individuel, micro-entreprise), registered at 60 rue François 1er, 75008 Paris, France under number SIRET 931 461 867 00034 (“we”). It connects a company’s Stripe and Livestorm accounts and shows how its webinars relate to its revenue.
We have two roles:
- For account data, about the people who use Turnout, we are the controller.
- For connected data, what Turnout copies from the Stripe and Livestorm accounts a workspace connects, we are a processor. The company that owns the workspace (the “customer”) is the controller, and our Data Processing Agreement applies.
Contact: privacy@heyturnout.com.
2. What we process
Account data
Your name, email address, sign-in method and sessions (handled by WorkOS); the email addresses admins invite to a workspace, which WorkOS uses to send the invitation; your workspace’s name and settings (internal email domains, excluded customers, excluded webinars); the AI assistants you connect: which one, when it was connected and last used; and a log of the actions taken in the workspace.
Billing data
For a workspace’s subscription: the billing name, company, address, email and VAT number, the subscription, invoices and payments. Stripe holds them for us (section 6). Card details go to Stripe: we never see full card numbers.
Connected data from Stripe
Read-only access to:
- Account: your account id, timezone and default currency
- Customers: who your customers are, and their country
- Products: product names
- Prices: plan prices and billing intervals
- Subscriptions: trials, plan changes and cancellations
- Invoices: paid invoices and their lines (your revenue)
- Credit notes: credits issued after payment
- Refunds: money given back
- Disputes: lost chargebacks
- Charges: which customer a refund or dispute belongs to
- Events: fast daily refreshes (what changed since last time)
Objects are stored as Stripe returns them. That includes customers’ names, emails, addresses, phone numbers, tax ids and metadata, and on charges the billing details and the card’s brand, country, expiry and last 4 digits. Never full card numbers: Stripe does not return them.
Connected data from Livestorm
Events, sessions and attendees as Livestorm returns them: name, email, phone, company, job title, registration answers, IP address, UTM parameters and attendance.
Results
What Turnout computes from connected data is aggregated: it holds no emails or names. An admin can publish the webinar impact report through a link: anyone with the link sees it without signing in. It holds aggregated results only, with no emails or names.
Technical data
Logs and error reports, which hold no credentials, emails or names, and cookies. We use strictly necessary cookies only, so there is no consent banner:
wos-session: keeps you signed in;turnout_stripe_oauth_stateandturnout_stripe_oauth_pending: protect the installation of the Stripe App, for 10 minutes at most;- Cloudflare’s security cookies: protect the service from abuse.
No analytics or advertising cookies.
3. Why, and on what legal basis
- Account data: to provide the service you signed up for (contract), and to keep it secure and fix errors (our legitimate interest).
- Connected data: we act on the customer’s instructions, under the DPA, to compute its own analytics.
- Billing data: to take payments and issue invoices (contract), and to keep invoices as accounting law requires (legal obligation).
- Technical data: security and debugging (our legitimate interest).
4. What we never do
We use connected data to compute the customer’s own analytics, nothing else. It is not used for other workspaces, not sold, not used for advertising or marketing, and not used for credit or eligibility decisions. We send no marketing messages to Stripe users. We share data only with the providers of section 6; with the AI assistant a user connects, which receives the results it asks for and handles them under its own terms; when the law requires it; or when the customer asks.
5. Where data is kept, and how it is protected
The database and file storage are hosted by DigitalOcean in Frankfurt, Germany. All traffic uses TLS. The database and files are encrypted at rest (AES-256). Stripe and Livestorm credentials are sealed (HPKE) and opened only by the worker that syncs them. Access to Stripe and Livestorm is read-only. Each workspace’s data is isolated by the database itself (row-level security). Logs and error reports hold no credentials, emails or names. The DPA’s annex lists the measures.
6. Subprocessors
| Name | Purpose | Location | Transfers outside the EU |
|---|---|---|---|
| DigitalOcean | Hosting: servers, database, file storage | Frankfurt, Germany | EU-U.S. Data Privacy Framework; standard contractual clauses as fallback |
| Cloudflare | DNS, TLS, firewall, email forwarding | Global network | EU-U.S. Data Privacy Framework; standard contractual clauses as fallback |
| WorkOS | Sign-in and invitation emails | United States | Standard contractual clauses |
| Sentry | Error reports | EU region (Germany) | EU-U.S. Data Privacy Framework; standard contractual clauses as fallback |
Each name links to that subprocessor’s data processing agreement. Not subprocessors: Stripe and Livestorm, the sources the customer connects; Open Exchange Rates, which provides exchange rates and receives no personal data. Workspace admins get 30 days’ email notice before we add a subprocessor.
For Turnout’s own subscriptions, Stripe takes payments, issues invoices and computes taxes. It processes the billing data of section 2, never connected data through Turnout (Ireland and United States; EU-U.S. Data Privacy Framework, standard contractual clauses as fallback; Stripe’s DPA).
When you book a call with us, to extend a trial or to talk about a mission, Notion Calendar receives the name and email you give in the booking form (United States; standard contractual clauses; Notion’s DPA).
7. How long we keep data
- Connected data: until the provider is disconnected, the workspace is deleted, or 12 months pass without anyone using the workspace, with a warning email 30 days before.
- Connected AI assistants: until disconnected, plus 30 days, or until the workspace is deleted.
- Results: the last 20 refreshes, and any refresh a shared link shows, until its last link is revoked.
- Settings: until the workspace is deleted.
- Invoices and billing records: 10 years, as French accounting law requires.
- The workspace’s activity log: kept after the workspace is deleted, as the record of what was done, the deletion included. It holds user ids, never emails or names.
- Sign-in accounts: until the workspace is deleted, unless you belong to another workspace, or when an admin removes you from your last workspace, or until you ask us to delete yours.
- Invitations: until accepted, cancelled or expired (7 days).
- Records of background jobs: 30 days. Counts of API calls: 90 days. Neither holds personal data.
- Database backups: 7 days. Files have no backups: they are read again from Stripe and Livestorm.
- Logs: kept by our hosting provider for operations only, not exported. Error reports: 30 days.
8. Disconnecting, uninstalling, deleting
- Disconnecting Stripe or Livestorm deletes its credentials at once, and the data copied from it within 24 hours.
- Uninstalling the Turnout Stripe App ends our access at once: Stripe revokes our token, and the next refresh marks the connection invalid. The data already copied stays until an admin disconnects Stripe, deletes the workspace, or nobody uses it for 12 months.
- Disconnecting an AI assistant (Settings › MCP) ends its access at its next request.
- Revoking a shared link (Webinar impact › Share report) stops it working at once.
- Deleting the workspace deletes, within 24 hours, its credentials, connected data, results and settings, and the sign-in accounts of members who belong to no other workspace. The deletion is logged. Backups expire within 7 days. Invoices are kept as section 7 says.
9. Your rights
If you use Turnout, you can ask us to access, correct, delete or export your data, or to restrict or stop processing it: write to privacy@heyturnout.com. We answer within one month.
If your data reached Turnout because a company connected its Stripe or Livestorm account (for example, you are its customer or attended its webinar), that company is the controller: ask it. If you write to us, we pass your request on to it and help it answer.
You can also complain to a supervisory authority, such as the one where you live or work, or ours: the CNIL (Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr).
10. Age
Turnout is for businesses. Its users are 18 or older and act for a business. It is not directed at children.
11. Changes
We update this page when what Turnout does changes; the date at the top says when. Before a change that matters to how your data is used, we email workspace admins.