1. INFORMATION WE COLLECT

We collect the following types of information:

Account Information

• Email address (required for authentication)
• Name (if provided via Google OAuth)
• Profile information (optional)

Usage Data

• Ideas submitted for analysis
• Analysis results and reports
• Generated landing pages
• Usage patterns and preferences

Technical Data

• IP address
• Browser type and version
• Device information
• Cookies and similar technologies

2. HOW WE USE YOUR INFORMATION

We use your information to:

• Provide and maintain the Service
• Process your idea analyses using AI
• Generate personalized reports and landing pages
• Communicate with you about the Service
• Improve and optimize the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. DATA SHARING AND DISCLOSURE

We do NOT sell your personal information. We may share data with:

Service Providers

• Supabase: Database and authentication
• Google AI (Gemini): AI analysis processing
• Stripe: Payment processing
• Vercel: Hosting and infrastructure

Legal Requirements

We may disclose information if required by law, court order, or to protect our rights and safety.

4. DATA SECURITY

We implement industry-standard security measures:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest (database encryption)
• Row Level Security (RLS) in Supabase
• Secure authentication (Magic Link, OAuth 2.0)
• Regular security audits

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. YOUR RIGHTS

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Objection: Object to certain data processing activities

To exercise these rights, contact us at privacy@onflame.dev

6. COOKIES AND TRACKING

We use cookies and similar technologies for:

• Essential cookies: Required for authentication and security
• Analytics cookies: To understand how you use the Service
• Preference cookies: To remember your settings

You can control cookies through your browser settings, but this may affect functionality.

7. DATA RETENTION

We retain your data for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for legal or legitimate business purposes (e.g., fraud prevention, compliance).

8. CHILDREN'S PRIVACY

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.

9. INTERNATIONAL DATA TRANSFERS

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top indicates when changes were made.

11. CONTACT US

For questions about this Privacy Policy or our data practices, contact us at: