Privacy Policy

This policy explains what data we collect, why, and your rights. It is a template — review with counsel before relying on it in production.

Data we collect

Account data (email, name), authentication metadata, content you create in the workspace, and billing records. Payment card data is handled entirely by Stripe and never touches our servers.

How we use it

To provide the service, authenticate you, process payments, gate paywalled content, and keep security audit logs. We do not sell your personal data.

Cookies

We use essential cookies to keep you signed in (secure, HTTP-only, SameSite). We do not use advertising or cross-site tracking cookies.

Third parties

We rely on Supabase (database, authentication, storage), Stripe (payments), and an AI provider (Anthropic or OpenAI) for server-side research tools that operate on your own data.

Your rights

You can export all of your data or permanently delete your account at any time from Account → Security & privacy. Deletion removes your account and associated data and cancels active subscriptions.

Contact

For privacy requests, contact the site administrator using the support email configured in settings.