Last updated: April 2026
1. Information We Collect
We collect the following categories of information:
- Account information. Name, email address, and password when you create an account.
- Payment information. Billing details and transaction history processed through our payment providers (Stripe or LemonSqueezy). We do not store full credit card numbers on our servers.
- Usage data. Pages visited, features used, interactions, browser type, operating system, IP address, and referring URLs — collected automatically via analytics.
- Communications. Content of support requests, emails, and feedback you send to us.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve our services.
- Process payments and manage your license and subscription.
- Send transactional emails (purchase confirmations, password resets, invitations).
- Communicate about product updates, new features, and service announcements. You can unsubscribe from non-essential emails at any time.
- Detect fraud, abuse, and security incidents.
- Analyze usage patterns to improve the product experience.
3. Cookies & Tracking
We use cookies and similar technologies for:
- Essential cookies. Session management, authentication, and security (locale preference, auth session). These are required for the service to function.
- Analytics cookies. We use PostHog for product analytics. These cookies help us understand how visitors use the site so we can improve the experience. You can opt out of analytics tracking via the cookie banner or your browser settings.
We do not use third-party advertising cookies or sell your data to advertisers.
4. Third-Party Services
We share data with the following categories of third-party services, each operating under their own privacy policies:
- Payment processors — Stripe, LemonSqueezy (billing and subscription management).
- Email delivery — Resend (transactional email sending).
- Analytics — PostHog (product analytics and usage tracking).
- Error monitoring — Sentry (crash reporting and performance monitoring).
- Authentication — OAuth providers (GitHub, Google, etc.) if you choose to sign in with a social account.
- AI providers — OpenAI, Anthropic (if you use AI chat features; your prompts may be sent to these providers for processing).
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
5. Data Storage & Security
Your data is stored securely using industry-standard encryption in transit (TLS) and at rest. We use Turso for database storage with edge replication. Access to production systems is restricted to authorized personnel. We regularly review our security practices, but no method of transmission or storage is 100% secure.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you services. After account deletion, we remove your personal data within 30 days, except where retention is required by law (e.g. tax/billing records may be retained for up to 7 years). Anonymized analytics data may be retained indefinitely.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access. Request a copy of the personal data we hold about you.
- Rectification. Request correction of inaccurate or incomplete data.
- Erasure.Request deletion of your personal data (“right to be forgotten”).
- Portability. Request your data in a structured, machine-readable format.
- Objection. Object to processing of your data for certain purposes.
- Withdrawal of consent. Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
8. International Transfers
Your data may be transferred to and processed in countries other than your own. Our third-party service providers operate globally. By using the service, you consent to such transfers. We take reasonable steps to ensure your data is treated securely and in accordance with this policy.
9. Children's Privacy
Our service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Last updated” date. For material changes, we will notify you via email or a prominent notice on our website.
11. Contact
If you have questions about this privacy policy or wish to exercise your data rights, contact us at [email protected].