Privacy Policy

What we collect

Your email address and password. Needed to create and secure your account. Passwords are stored only as a cryptographic hash — we cannot read them, and neither can anyone who obtained a copy of our database.

Subscription status. Whether your subscription is active, when the current period ends, and identifiers that link your account to your Stripe customer record.

Payment information. Handled entirely by Stripe. Card numbers never reach our servers and we cannot see them. We receive only the last four digits, card brand, and billing status.

Basic technical data. Our hosting provider records standard server logs, including IP address and browser type, for security and reliability.

We do not use advertising trackers, we do not build behavioural profiles, and we do not sell personal information to anyone.

Why we collect it

To give you access to what you paid for, to take payment, to contact you about your account or a service problem, and to keep the Service secure. We do not use your email for marketing unrelated to the Service without asking you first.

Who we share it with

Only the service providers needed to run the Service, and only what each of them needs:

• Stripe — payment processing and billing.
• Supabase — account and subscription database.
• Vercel — website hosting and server logs.

We may also disclose information where required by law. We do not share it for any other purpose.

Where your information is stored

Our providers operate data centres outside Canada, including in the United States, so your information may be stored or processed there. Information held in another country can be accessed by that country’s courts and law enforcement under its own laws. We flag this because PIPEDA requires it be made clear, not buried.

Cookies

We use a small number of strictly necessary cookies to keep you signed in and to secure the admin area. There are no analytics or advertising cookies. Blocking these cookies will stop sign-in from working.

How long we keep it

We keep account information while your account exists. If you close your account we delete your account record, except where we must keep transaction records to meet tax and accounting obligations — typically six years for financial records.

Your rights

You can ask us to show you the personal information we hold about you, correct it if it is wrong, or delete your account and its data. Email thelukerj@gmail.com and we will respond within 30 days, as PIPEDA requires.

If you are unhappy with how we have handled your information, you can complain to the Office of the Privacy Commissioner of Canada.

Security

Connections are encrypted in transit, passwords are hashed, administrative access is restricted, and access to the paid content is verified on our servers rather than in your browser. No system is perfectly secure, and we do not claim otherwise. If a breach affects your information in a way that creates a real risk of significant harm, we will notify you and the Privacy Commissioner as required by law.

Children

The Service is for business use and is not directed at children. We do not knowingly collect information from anyone under 16.

Changes

If we change this policy in a way that materially affects how we use your information, we will email subscribers before it takes effect.

Contact

Privacy questions or requests: thelukerj@gmail.com
Luke Johnson, Ontario, Canada