Privacy Policy

1. What We Collect

When you create an account, we collect:

• Name and email address
• Hashed password (we never store plaintext passwords)
• Usage data (lookup counts, filters used)
• Payment information (processed securely by Stripe | we never see your card number)

2. How We Use It

Your data is used to:

• Provide and improve the Service
• Enforce usage limits based on your plan
• Send transactional emails (password resets, account notifications)
• Send occasional product updates (you can opt out anytime)

3. What We Don't Do

• We never sell your personal data
• We never share your data with third parties for marketing
• We never use your data to train AI models

4. Third-Party Services

We use the following services that may process your data:

• Supabase | authentication and database hosting
• Stripe | payment processing
• Vercel | application hosting
• Resend | transactional email delivery

5. Cookies

We use essential cookies for authentication sessions only. We do not use advertising or tracking cookies.

6. Data Retention

Account data is retained while your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized usage statistics may be retained.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing us. We will respond within 30 days.

8. Contact

Privacy questions? Email info@coraglobalprojects.com.