Last updated: placeholder — set when a real policy is published
Account information (name, email, password hash), content you create in the Service (projects, tasks, comments, files), and basic usage/analytics data (page views, device type) needed to operate and improve the Service.
To provide and operate the Service, process payments, send transactional emails (verification, password resets, invites, notifications), and — where you've opted in — product update emails.
We use third-party providers to operate the Service: Stripe (payments), Resend (transactional email), Supabase (database and file storage). These providers only receive the data necessary to perform their function.
We retain your data for as long as your account is active. You can permanently delete your account and all associated data at any time from account settings.
You can access, correct, or delete your personal data. Account deletion is self-service and permanent — see Profile → Delete account.
Passwords are hashed with bcrypt. Data is encrypted in transit. We restrict internal access to production data to what's necessary for support and operations.
We may update this policy from time to time. Material changes will be communicated via email or an in-app notice.
Questions about this policy or your data can be sent to hello@octopusoos.com.