Privacy policy

We process account identifiers, profile information, authentication events, device and browser details, IP addresses, approximate location, workspace settings, security audit records, and support communications needed to operate and protect the service.

We do not sell personal information. Product-specific AI inputs, billing information, and analytics are not enabled in this foundation unless a future feature explicitly introduces and documents them.

Information is used to provide the contracted service, secure accounts, prevent abuse, satisfy legal obligations, and improve reliability. Where consent is required for optional analytics or marketing technology, those categories remain disabled until consent is recorded.

Authentication and primary data services may be processed by Supabase. Hosting, monitoring, transactional email, and approximate IP geolocation may be processed by Vercel, Sentry, Resend, and the configured geolocation provider. Appropriate contracts and transfer safeguards must be reviewed for every launch region.

Operational records are retained only as long as required for the service, security, dispute resolution, and law. Users can request access, correction, portability, restriction, objection, or deletion where applicable. Account deletion is available from Settings and may retain narrowly required legal or security records.

Privacy and data-rights requests can be sent to support@example.com. Identity verification may be required before fulfilling a request.