Privacy Policy

Last updated: March 13, 2026

1. Introduction

GradientCast ("we", "us", or "our") respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Information We Collect

Account Information

When you create an account, we collect your email address. Authentication is handled by Supabase Auth — we do not store your password directly.

Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers or sensitive payment details on our servers. We receive and store your Stripe customer ID, transaction amounts, and purchase history for account management purposes.

Usage Data

We may collect basic usage data such as pages visited and features used to improve the Service. We use Vercel Analytics for aggregated, privacy-friendly analytics that do not track individual users across sites.

3. How We Use Your Information

We use your information to:

  • Provide and maintain your account and subscription
  • Process payments and send receipts
  • Send important service-related communications (e.g., subscription expiration notices)
  • Improve the Service based on aggregated usage patterns
  • Respond to support requests

4. Information Sharing

We do not sell your personal information. We share data only with:

  • Stripe — for payment processing
  • Supabase — for authentication and data storage
  • Vercel — for hosting and analytics

These providers act as data processors and are bound by their own privacy policies and our agreements with them.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes (e.g., purchase history for tax compliance).

6. Your Rights

You have the right to:

  • Access your personal data we hold
  • Correct inaccurate information
  • Delete your account and associated data
  • Export your data in a portable format

To exercise any of these rights, email support@gradientcast.com.

7. Cookies

We use essential cookies only — specifically for authentication session management. We do not use tracking cookies or third-party advertising cookies.

8. Security

We use industry-standard security measures including HTTPS encryption, secure authentication via Supabase, and Stripe's PCI-compliant payment processing. However, no method of transmission over the Internet is 100% secure.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email. The "last updated" date at the top reflects the most recent revision.

11. Contact

Questions about this policy? Email us at support@gradientcast.com.