Privacy Policy

1. Information We Collect

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We use this to identify your account and personalise your experience.

We also collect usage data to enforce our free-tier limits:

• Which agency and supplier report pages you visit (page path only, not the content you view)
• Your IP address (for anonymous usage tracking when you are not signed in)
• Timestamps of your page visits

2. How We Use Your Information

• Authentication: to sign you in and maintain your session.
• Usage metering: to count how many distinct report pages you view per week and enforce the free-tier limit of 4 reports per rolling 7-day window.
• Subscription management: if you subscribe to the Pro plan, we share your email with Stripe to process payments. We store your Stripe customer ID to link your subscription status.

3. Third-Party Services

We use the following third-party services:

• Supabase — authentication and database hosting. Your account data is stored on Supabase’s infrastructure.
• Google OAuth — for sign-in. Google’s privacy policy applies to the data they process during authentication.
• Stripe — for payment processing. Stripe’s privacy policy applies to payment data. We do not store your credit card details.
• Vercel — for hosting. Vercel may collect standard server logs (IP addresses, request timestamps).

4. Data Retention

Page view records are retained for usage metering purposes. We periodically purge page view records older than 90 days. Your account data is retained as long as your account is active. If you delete your account, we will remove your personal data within 30 days.

5. Cookies

We use cookies solely for authentication session management. We do not use advertising cookies, tracking pixels, or analytics cookies. The authentication cookies are essential for the service to function and cannot be disabled.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing (by signing out and not using the service)

To exercise any of these rights, contact us at doru.soy@gmail.com.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

8. Contact

Questions about this Privacy Policy can be sent to doru.soy@gmail.com.