Privacy notice
Draft. The service owner has not finished this page yet. Items marked TODO need the owner's legal entity and contact details before this service is offered to the public.
Last updated: TODO (date)
1. Controller
TODO: legal entity name, TODO: address. Contact for privacy questions: TODO: privacy contact email.
2. What we store about you
- Your email address, optional name, and a salted PBKDF2 hash of your password (never the password).
- Session records: a hash of the session token, your browser's user-agent string, and a salted hash of your IP address (never the raw IP).
- Security events (sign-ins, failed sign-ins, password and 2FA changes) with the same salted IP hash.
- If you turn on two-factor sign-in: the authenticator secret, encrypted, and hashes of your recovery codes.
3. What we store for your apps
Your Stripe secret key and webhook signing secret, encrypted at rest; your apps' configuration; and, for your end customers, the account ids your app sends, their Stripe customer and subscription ids, emails your app provides, and subscription state. You are the controller of your end customers' data; we process it on your behalf. TODO: data processing terms.
4. Processors
Cloudflare (hosting and database), Stripe (payments, under your own Stripe account), and, if email is enabled, the email provider (TODO: name, e.g. Resend). TODO: complete sub-processor list.
5. Retention
Account data is kept until you delete your account. Stripe event records are pruned after 90 days. TODO: backup retention.
6. Your rights
You can see and change your details in Account settings, export your apps' customer records from the dashboard, and delete your account. TODO: how to exercise other rights and the supervisory authority.