Database

Supabase Postgres, hosted on AWS in the United States (us-east region).

International Transfers

We are based in Bulgaria; the database and most processors below are in the United States. Those transfers rest on each processor’s data-processing agreement with the EU Standard Contractual Clauses (and, where the processor holds it, the EU–US Data Privacy Framework). Product analytics stays in the EU.

Encryption

TLS 1.3 in transit. AES-256 at rest. Backups encrypted with separate keys.

Access

Narrowly-scoped service credentials; every query is scoped to your account by the application. No engineer reads your private data without an explicit support request from you.

Access

Request a copy of every record we hold about you.

Rectification

Correct anything that is wrong.

Erasure

Delete your account and all associated data — completed within 30 days. Two records outlive it by design: the email suppression entry (so a bounced or complaining address is never emailed again) and the payment provider’s customer record (Stripe keeps it for its own tax and dispute obligations).

Portability

Export a complete copy of your data as a downloadable HTML file.

Objection & Restriction

Opt out of non-essential processing or limit how we use your data.

Active Accounts

Retained for as long as your account exists.

After Deletion

All personal data is removed within 30 days, except the email suppression entry and the payment provider’s customer record (see Erasure above). Backups containing residual data age out within 90 days.

Gift Recipients

An address a purchaser typed for someone else is removed 30 days after the gift is claimed or refunded (immediately if that person is a member who deletes their own account).

Aggregated Analytics

De-identified product metrics may be retained indefinitely for service improvement.