Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, password when you create an account
• Contact Information: Name, email, subject, and message when you use our contact form
• Newsletter: Email address if you subscribe to our newsletter
• OAuth Data: If you sign in with Google or GitHub, we receive your name, email, and profile picture

1.2 Automatically Collected Information

When you use our service, we automatically collect:

• Usage Data: Pages visited, time spent, links clicked
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies, analytics cookies (see Cookie Policy)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Create and manage your account
• Send you technical notices and support messages
• Respond to your comments and questions
• Send newsletters if you've opted in
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

3. Information Sharing

3.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties.

3.2 Service Providers

We share information with service providers who help us operate our service:

• Hosting: Vercel (infrastructure hosting)
• Database: Your database provider (e.g., Neon, PlanetScale)
• Email: Resend (transactional emails)
• Analytics: Google Analytics (anonymized usage data)
• Authentication: Google, GitHub (OAuth providers)
• Security: Cloudflare Turnstile (CAPTCHA), Upstash (rate limiting)

3.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted over HTTPS (TLS 1.3)
• Password Storage: Passwords hashed with bcrypt (cost factor 12)
• Rate Limiting: Protection against brute force attacks
• CAPTCHA: Protection against automated abuse
• Security Headers: CSP, HSTS, X-Frame-Options, etc.

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services:

• Account Data: Retained until you delete your account
• Contact Form: Stored for 2 years for support purposes
• Analytics: Anonymized data stored for 26 months (Google Analytics default)
• Logs: Security and error logs retained for 90 days

6. Your Rights (GDPR/CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your data
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@example.com

7. Cookies

We use cookies for authentication, preferences, and analytics. See our Cookie Policy for details.

8. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of our service after changes indicates acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@example.com
• Contact Form: /contact

12. Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at dpo@example.com