Privacy Policy

Last updated: March 2026

1. Data Collected

Email address (registration), authentication tokens (session management), and usage logs (API request counts for rate limiting). No PII beyond authentication data is collected. No cross-site tracking.

2. Data Not Collected

We do not sell data. We do not use tracking pixels or third-party analytics cookies.

3. Third Parties

Supabase stores authentication data under their data processing agreement. Stripe processes payments under their privacy policy. Vercel hosts the platform under their data processing agreement.

4. Cookies

Authentication session cookies only. No advertising or tracking cookies.

5. Data Retention

Account data is retained until account deletion. Ingestion data is derived from public sources and is retained for platform operation.

6. Your Rights

You have the right to access and delete your account data. Email [TODO: privacy contact email] to exercise these rights. We will respond within 30 days.