supagrid

1. Introduction

Welcome to supagrid ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

By accessing or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us. Such information includes the following.

Account registration information (email address and password, managed by Supabase Auth)
Profile information (first name, last name, email, company, phone number, and subscription or plan preferences)
Payment and billing. We use Stripe for payment processing. Card details are entered on Stripe's secure pages and we do not store or have access to your full card number
Communication data when you contact us for support, sales, or feedback

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information. Such information includes the following.

Usage data necessary to operate the Service (e.g. server logs, feature usage)
Device and connection information (browser type, operating system, IP address) where relevant to security or operation
Cookies and similar technologies (see Section 6)

3. How We Use Your Information

We use the information we collect for various purposes. These include the following.

To provide, maintain, and improve our Service
To process your registration and manage your account
To process payments and manage subscriptions
To communicate with you about your account, transactions, and Service updates
To respond to your inquiries and provide customer support
To send you marketing communications only where you have opted in
To detect, prevent, and address technical issues and security threats
To comply with legal obligations and enforce our Terms of Service
To analyse usage patterns and improve user experience

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances.

Service Providers. We share information only as needed with providers who assist us in operating the Service. These include Stripe (payment processing; card data is collected and held by Stripe, not by us), Supabase (authentication and account data, including secure storage of credentials), Resend (sending transactional emails such as support and feedback replies), and hosting and infrastructure providers.
Legal Requirements. When required by law, court order, or government regulation.
Business Transfers. In connection with a merger, acquisition, or sale of assets.
With Your Consent. When you have given us explicit permission to share your information.
To Protect Rights. To protect our rights, property, or safety, or that of our users or others.

5. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Payment card data is held and processed by Stripe (a PCI DSS compliant provider); we do not store card numbers or full payment credentials. Your account credentials are managed by Supabase Auth, which handles secure authentication and password storage.

Your data is stored on secure servers and may be processed in Australia or other jurisdictions where our service providers operate. We take steps to ensure that your data is handled in accordance with this Privacy Policy regardless of where it is processed.

No method of transmission over the Internet or electronic storage is 100% secure; we cannot guarantee absolute security.

6. Cookies and Similar Technologies

We use cookies and similar technologies where necessary to operate the Service. For example, we use them to keep you signed in (session cookies) and to remember preferences. We do not use third-party advertising or marketing cookies. You can set your browser to refuse or warn on cookies. If you block essential cookies, you may not be able to use parts of the Service that require you to be logged in.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information. These may include the following.

Access. Request access to your personal information.
Correction. Request correction of inaccurate or incomplete information.
Deletion. Request deletion of your personal information.
Objection. Object to processing of your personal information.
Portability. Request transfer of your data to another service.
Withdraw Consent. Withdraw consent for data processing where applicable.

To exercise these rights, please .

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us.