Privacy Policy

We collect only what we need to run the Service:

• Account information — your email address and authentication identifiers, handled through our authentication provider when you sign up or sign in. We do not store your password.
• Subscription & billing information — plan, subscription status, and billing records. Card details are collected and stored by our payment processor, not by us.
• Product data you create — the bills you follow (your watch list), alert preferences, saved packaging specifications, saved research, and any company-profile details you enter to estimate exposure.
• Usage & device data — pages viewed, features used, approximate location derived from IP, browser and device type, and similar analytics, collected to understand and improve the Service.
• Communications — messages you send us (for example, support or access requests) and your email engagement, so we can respond and manage the emails you receive.

We use the information above to:

• provide, maintain, and secure the Service and your account;
• process subscriptions, trials, and billing, and prevent fraud and abuse;
• send transactional and subscription email — sign-in, deadline and new-bill alerts you opt into, billing notices, the periodic digest, and account notices;
• understand usage, debug problems, and improve features and content;
• comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your saved watch list, company profile, or research to train third-party models.

We use cookies and browser local storage for essential functions (keeping you signed in, remembering your theme and preferences) and for analytics. Analytics cookies help us measure which pages and features are used. You can block or delete cookies in your browser; some parts of the Service may not work correctly if you do. We honor browser "Do Not Track" where legally required.

We share information with a small set of service providers that process it on our behalf, under their own terms and safeguards:

• Google Firebase — account authentication.
• Stripe — subscription payments and billing. Card data is handled entirely by Stripe.
• Google Analytics — product usage analytics.
• SendGrid (Twilio) — transactional and subscription email delivery.
• Google Cloud Platform — hosting and infrastructure.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.

We keep account and product data for as long as your account is active, and for a limited period afterward as needed to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When you close your account we delete or de-identify your personal information within a reasonable period, except where retention is required by law. Analytics data is retained on a rolling basis.

• Email — every non-essential email includes a one-click unsubscribe, and you can manage alert preferences from My Library. We still send essential account and billing notices.
• Access, correction & deletion — you may request a copy of your personal information, ask us to correct it, or ask us to delete your account and data by emailing us.
• Regional rights — depending on where you live (for example, the EU/UK or California), you may have additional rights over your personal data. We honor valid requests as required by applicable law and will not discriminate against you for exercising them.

We use industry-standard measures — encryption in transit, access controls, and trusted infrastructure providers — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We operate in the United States, and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers of personal information.

The Service is intended for business use by adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. The updated version takes effect when posted, and we will update the effective date above. Material changes will be communicated where appropriate.

This Policy is governed by the laws of the State of New York, without regard to its conflict-of-laws rules.

Questions or requests about your privacy? Email kenny@superfun.studio.