Privacy Policy

Fathom Analytics (Cookieless)

We use Fathom Analytics to understand how visitors use our site. Fathom is a privacy-first analytics platform that:

• Does not use cookies - No tracking cookies are stored in your browser
• Does not collect personal data - No IP addresses, user agents, or identifiable information
• Does not sell data - Your usage data is never sold to third parties
• GDPR compliant - Meets European privacy standards

Fathom collects anonymous aggregated data such as page views, referrers, and basic device information. Learn more at usefathom.com/compliance.

Supabase Data Management

We use Supabase, a secure PostgreSQL database platform, to store your account information and user-generated content. The data we store includes:

• Account Information: Email address, display name, account creation date
• Subscription Tier: Free, Premium Monthly, Premium Annual, or Lifetime
• User-Generated Content: Saved prompts, collections, and collection items
• Authentication Data: Encrypted passwords and session tokens

Data Security: All data is encrypted at rest and in transit using industry-standard encryption protocols. Supabase is SOC 2 Type II certified and GDPR compliant.

Data Retention: Your data is retained for as long as your account is active. If you delete your account, all associated data is permanently removed within 30 days.

Learn more about Supabase security at supabase.com/security.

LocalStorage Usage

We use your browser's LocalStorage to enhance your experience by persisting state between sessions. This data is stored locally on your device and is never transmitted to our servers unless you explicitly save it.

Storage Key: pocket-photographer-prompt-builder

Stored Data:

• Prompt builder text content
• Selected dictionary terms
• Builder open/closed state

Your Control: You can clear this data at any time using:

• The "Clear All" button in the prompt builder
• Your browser's "Clear browsing data" settings
• Developer tools → Application → Local Storage

This data is not shared with any third parties and remains entirely within your browser until you choose to save it to your account or clear it.

All payment processing is handled by ThriveCart, a secure third-party payment processor. We do not store your credit card information or payment details on our servers.

When you make a purchase, ThriveCart collects:

• Payment method details (processed securely by ThriveCart)
• Billing address
• Email address (to send receipts and confirm your purchase)

We receive notification of your purchase via webhook, which includes only your email address and product purchased. This allows us to upgrade your account tier automatically.

We use Resend to send transactional emails, including:

• Password reset requests
• Email verification links
• Account notifications

We do not send marketing emails or newsletters without your explicit consent. All emails are transactional and necessary for the operation of your account.

We do not sell, rent, or share your personal information with third parties for marketing purposes. The only third-party services we use are:

• Fathom Analytics - Anonymous, cookieless website analytics
• Supabase - Secure database and authentication
• ThriveCart - Payment processing
• Resend - Transactional email delivery

All of these services are GDPR compliant and use your data solely to provide their specific services.

You have the right to:

• Access your data - Request a copy of all data we hold about you
• Correct your data - Update inaccurate information in your account settings
• Delete your data - Request permanent deletion of your account and all associated data
• Export your data - Download your saved prompts and collections

To exercise any of these rights, please contact us at privacy@pocketphotographer.ai.