Privacy Policy

• Email address — supplied when you sign in. Used to authenticate you and to reply to feedback.
• Images you upload — stored in a private Supabase Storage bucket, keyed to your user id.
• Board configuration — page size, layout, crop coordinates, text-box position, etc.
• Subscription state — plan, status, current period end, and Stripe customer id. Card details are held by Stripe, not by us.
• Feedback you submit — the message, and optionally your email if signed in.

We don't use analytics or advertising trackers on the marketing pages. We don't sell your data. We don't train models on your uploads.

All personal data and images are stored on Supabase (EU region) and processed by Vercel (edge / EU-configured regions where possible). Payments run through Stripe. Each provider has its own privacy policy.

Account data and boards stay until you delete them or delete your account. Feedback is retained indefinitely so we can respond and follow up. Stripe retains transaction records per their own retention policy.

• Right to access — request a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — delete your account and associated data
• Right to object — withdraw consent to processing
• Right to portability — receive your data in a common format

Exercise any of these by messaging us via the feedback form on the landing page.

Access to your rows in the database is enforced by Postgres row-level security — a signed-in user can only read or modify their own boards. Storage files sit in a private bucket and are served via short-lived signed URLs. TLS everywhere.

We use only strictly-necessary cookies to keep you signed in. No advertising or third-party tracking cookies.

We'll update this page if what we collect or how we process it changes. Material changes will be flagged in the app.

Privacy questions or GDPR requests: use the feedback form on the landing page.