Last updated: October 14, 2026
This Privacy Policy explains how Derrick App, a French SAS ("Derrick", "We", "Us"), collects and uses personal data when You use derrick-app.com and the Derrick services: the web application, the Google Sheets add-on, the Chrome extension, the REST API and the MCP server (together, the "Service").
It covers the data about You as a user of the Service. The data You process about other people with the Service (for example a list of prospects) is covered by our Data Processing Agreement: for that data, You are the data controller and Derrick acts as Your processor.
Data We collect
Account data. You sign in with a Google account. We only request Your name, email address and Google account identifier (scopes "openid", "email", "profile"). We have no access to Your mailbox and We never send the data You process to it.
Google Sheets add-on. If You use the add-on, You accept Google's authorisation that lets the add-on read and write the spreadsheet it is installed in and make external requests. This is needed to enrich the rows You select and write the results back.
LinkedIn connection. Features that read LinkedIn or Sales Navigator use Your own LinkedIn session. If You connect it through the Derrick Chrome extension (or by pasting it yourself), We store Your LinkedIn session token and use it only to run the actions You trigger. You can disconnect it at any time by logging out of LinkedIn or removing it from Derrick.
Billing data. Payments are handled by Stripe. We never see or store Your full card number.
Usage data. We record the actions You run, credits used and technical logs, to operate the Service, prevent abuse and fix errors.
Website analytics. On derrick-app.com We use analytics tools (Google Analytics, Microsoft Clarity, Mixpanel) to understand how the site is used.
How We use Your data
- To provide the Service, run the actions You request and manage Your account and credits.
- To bill Your subscription.
- To send You service messages and, if You subscribed, our newsletter (You can unsubscribe at any time).
- To secure and improve the Service.
We do not sell Your personal data.
Where Your data is processed
The Service is hosted on Heroku, on AWS servers in Europe. Some providers (for example Stripe, Google or AI model providers when You use an AI feature) may process data outside the European Union; in that case the transfer relies on the safeguards provided by the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision.
Retention
We keep Your account data while Your account is active, and then only as long as needed to meet our legal and accounting obligations. Technical logs are kept for a limited period.
Your rights
You can ask to access, correct, delete or export Your personal data, or object to or restrict its processing, by writing to contact@derrick-app.com. You can also lodge a complaint with the CNIL (cnil.fr).
Security
Data in transit is encrypted with HTTPS/TLS and access to our systems is limited to authorised personnel. No method of transmission or storage is 100% secure, but We take reasonable measures to protect Your data.
Children
The Service is meant for professionals and is not directed to anyone under 16.
Changes to this Privacy Policy
We may update this Privacy Policy. The new version is published on this page with a new "Last updated" date.
YouTube API Services
Derrick uses YouTube API Services to publish videos on Derrick's own YouTube channel. By interacting with videos published through these services, you are also bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.
Our internal tool, Derrick Video Publisher, only accesses the YouTube account that a member of our team explicitly authorizes. It uses this access to upload videos, set their title, description, tags, language and thumbnail, add them to playlists, and read the channel name. It does not access, store or share any other YouTube user's data. The only data we keep is the ID and link of the videos we upload, in our internal publishing log.
You can revoke Derrick Video Publisher's access at any time from your Google security settings. To ask us to delete the data described above, contact contact@derrick-app.com; we delete it within 7 days.
Contact Us
For any question about this Privacy Policy: contact@derrick-app.com.