Privacy Policy

1. What we collect

• Account info: your email address, used to sign you in with a magic link.
• Vault entries you add: subscription and course names, prices, billing cadence, renewal dates, tags, notes, and optional login URLs.
• Billing info: handled entirely by Stripe. We store a Stripe customer ID and subscription status. We never see or store your card details.
• Basic technical logs: IP and request logs kept briefly for security and abuse prevention.

2. What we do NOT collect

• We never store passwords to any third-party service you track.
• We do not sell your data or share it with advertisers.
• We do not run third-party ad or tracking pixels on the app.

3. How your data is protected

Your vault is scoped to your account with row-level security in the database — other users cannot read your entries. Traffic is served over HTTPS. Authentication is handled by our backend provider using industry-standard magic-link flows.

4. Subprocessors

We use a small number of trusted providers to run the app:

• Lovable Cloud / Supabase — database, auth, and hosting.
• Stripe — payment processing and subscription billing.

5. Your rights

• Export: download all your vault data as CSV anytime from Settings.
• Delete: use "Delete my data" in Settings to erase your vault and cancel your subscription at period end.
• Access & correction: you can view and edit everything you've stored directly in the app.

6. Cookies

We use only the cookies and local storage strictly necessary to keep you signed in and to remember your theme preference. No advertising or cross-site tracking cookies.

7. Changes to this policy

If we make material changes, we'll update the date above and notify signed-in users by email where appropriate.

8. Contact

Questions or requests? Email support@mysubstrackervault.com.