Privacy Policy

What We Collect

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We do not access your contacts, calendar, drive, or any other Google data.

How We Use Your Data

• Authentication: Your email identifies your account so your mindmap state, annotations, and preferences are saved and restored across sessions.
• Display: Your name and profile picture may be shown in the app (e.g., in annotations or discussion posts you create).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Data Storage

Your data is stored in a Supabase (PostgreSQL) database hosted in AWS. Authentication tokens are managed by Supabase Auth and stored as secure, HTTP-only cookies in your browser.

Cookies

We use essential cookies only for authentication session management. We do not use advertising cookies, tracking pixels, or third-party analytics. No cookie consent banner is needed because we only use strictly necessary cookies.

Third-Party Services

• Google OAuth: Authentication only. Subject to Google's Privacy Policy.
• Supabase: Database and auth hosting. Subject to Supabase's Privacy Policy.
• Vercel: Frontend hosting. Subject to Vercel's Privacy Policy.

Your Rights

You can:

• Delete your account and all data from the Settings page at any time.
• Sign out at any time using the button in the navigation bar.
• Revoke Google access from your Google Account permissions.

Account deletion permanently removes your profile, saved mindmap states, and annotations. This action cannot be undone.

Data Retention

Your data is retained as long as your account exists. When you delete your account, all associated data is permanently removed within 24 hours.

Contact

For questions about this privacy policy, contact us at privacy@results-season.com.