Privacy Policy

Last updated: [DATE]. Data controller: [YOUR COMPANY], [YOUR ADDRESS], [PRIVACY EMAIL].

1. What we collect

• Account data: email, name, password hash (or Google account link).
• Content you submit for audits: text, PDFs, imported URLs, audience descriptions.
• Billing data: credit balance and transactions. Card details are handled by Lemon Squeezy, never by us.
• Security logs: IP address, user agent, and event type for sensitive actions (sign-in, payments, deletion).

2. How we use it

To produce your audits (your material is sent to our AI providers solely for this purpose), to operate billing, to secure the service, and to send transactional email. We do not sell personal data and we do not use your material to train models.

3. Processors

We use: an LLM API provider (audit generation), Lemon Squeezy (payments, merchant of record), an email delivery provider (transactional mail), a hosting provider, and Sentry (error monitoring). A current list is available at [PROCESSORS PAGE / EMAIL].

4. Retention

Account data and audit results are retained while your account exists. On deletion, materials and generated personas are purged immediately, your profile is anonymized, and financial ledger entries are retained for the legally required bookkeeping period (7 years) before hard deletion.

5. Your rights

You can export all your data as a zip from the account page, correct your profile, and delete your account (GDPR Arts. 15-21). For anything else, contact [PRIVACY EMAIL]. You may lodge a complaint with your supervisory authority.

6. Cookies

We set one strictly necessary httpOnly session cookie. Optional analytics load only with your consent — see the Cookie Policy.

7. Security

Passwords are hashed with BCrypt, transport is TLS-only in production, access tokens are short-lived, and all sensitive actions are logged. Report vulnerabilities to [SECURITY EMAIL].