Privacy Policy

1. Information We Collect

When you sign in using Google or GitHub via Clerk, we collect your name, email address, and profile image URL. We do not access any additional data from your account.

Payment data from Polar.sh and Stripe includes transaction status, timestamp, and the last four digits of your card. We do not store your full payment information.

We also use Cloudflare for hosting, analytics, and security. Cloudflare may collect standard logs such as IP address, browser type, device, and access times. We view limited OAuth overview metrics in Google Cloud to monitor authentication activity.

2. How We Use Your Data

• Authenticate and manage your account.
• Verify Pro access and deliver purchased Products.
• Send updates or important account-related information.
• Handle refunds and support requests.
• Improve security and user experience.

We do not use your data for advertising or sell it to third parties.

3. Cookies and Tracking

We use cookies and similar technologies provided by Cloudflare and Clerk for authentication and performance analytics. These cookies are essential for site functionality and security. You may manage or delete cookies in your browser settings.

4. Google User Data Compliance

Our use of Google data complies with the Google API Services User Data Policy and Limited Use requirements. We access only basic account info (name, email, profile image), never share it, and never use it for advertising. You can revoke access anytime via Google Account Permissions.

5. Data Retention and Deletion

We retain data as long as your account is active. Transaction logs may be retained as required by law or accounting regulations. You may request deletion by emailing hi@applifted.work. Deleting your account removes all stored data and purchased access.

6. Data Sharing

We only share your data with essential third parties necessary for our operations:

• Clerk – authentication provider
• Polar.sh / Stripe – payment processing
• Cloudflare – hosting, security, and analytics

These partners comply with data protection standards and only process data on our behalf.

7. Security

We use HTTPS encryption, secure databases, and limited internal access to protect your information. We regularly monitor for vulnerabilities and unauthorized access attempts.

8. Your Rights (GDPR)

EU residents have the right to access, correct, delete, or request a copy of their personal data. To exercise these rights, contact us at hi@applifted.work.

9. Changes to This Policy

We may update this Privacy Policy periodically. Updates take effect upon posting on our website. Significant changes will be announced via email or notice on our site.

10. Contact

For privacy, data deletion, or compliance inquiries, contact us at hi@applifted.work.