Privacy Policy

1. Data we collect

• Account: your email address and, optionally, your name.
• Billing: payments are handled by Stripe. We do not store card details — we keep a Stripe customer reference and your subscription status.
• Usage: download records (which component, when, your IP address) used to operate the Service, enforce limits, and trace leaks.
• Technical: limited diagnostic data if an error occurs, to keep the Service reliable.

2. How we use your data

To provide and secure the Service, process payments, send transactional email (verification, sign-in links, receipts), enforce our License and usage limits, and comply with legal obligations.

3. Legal bases (GDPR)

We process data to perform our contract with you (providing the Service), for our legitimate interests (security, fraud and abuse prevention, improving the Service), and to meet legal obligations. Where we rely on consent, you may withdraw it at any time.

4. Who we share it with

We use a small set of processors, each only for its purpose:

• Stripe — payment processing and subscription billing.
• Resend — sending transactional email.
• Google Cloud Storage — storing component source.
• Error monitoring & hosting providers — running and keeping the Service reliable.

We do not sell your personal data.

5. Cookies

We use only essential cookies to keep you signed in (a secure, httpOnly session cookie). We do not use advertising or cross-site tracking cookies.

6. Data retention

We keep account and billing records for as long as your account is active and as required for legal, tax and accounting purposes. Download and log records are kept for a limited period for security and abuse prevention.

7. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain processing, or request portability. To exercise these rights, contact us at the address below.

8. International transfers

Some processors may handle data outside your country. Where they do, we rely on appropriate safeguards (such as Standard Contractual Clauses).

9. Security

We protect accounts with hashed passwords and rotating session tokens, transport encryption, access controls, and least-privilege processing. No system is perfectly secure, but we take reasonable measures to safeguard your data.

10. Changes & contact

We may update this policy; material changes will be posted here. For privacy questions or requests, contact privacy@unordinary.app.