Privacy Policy

1. Introduction

Leddit is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

• Account Data: Email, profile information via Google OAuth
• Usage Data: Pages visited, browser type, IP address, device information
• Payment Information: Processed through our payment provider; card details are encrypted and tokenized
• Service Data: Any data you create or upload while using our platform

3. How We Use Your Data

• Service maintenance and improvement
• Sending alerts and notifications
• Generating reports and analytics
• Processing payments
• Communications about service updates
• Fraud prevention and security
• Legal compliance

4. Legal Basis for Processing (GDPR)

• Contract: Processing necessary to provide our service
• Legitimate Interest: Service improvement and security
• Consent: Marketing communications (where required)
• Legal Obligation: Compliance with applicable laws

5. Third-Party Services

We may share data with trusted third-party service providers:

• Supabase (USA) - Database and authentication
• Payment processors - Secure payment processing
• Google - OAuth authentication
• Hosting providers - Application infrastructure

6. International Data Transfers

Your data may be transferred to and processed in the United States and other countries. For users in the European Economic Area (EEA), we rely on Standard Contractual Clauses to ensure adequate data protection.

7. Data Retention

• Service Data: Retained based on your subscription and usage
• Account Information: Retained until account deletion
• Payment Records: Retained for up to 7 years for legal/tax compliance
• Usage Logs: Retained for 90 days

8. Security Measures

• TLS 1.3 encryption for data in transit
• Encryption at rest for stored data
• API key authentication
• Regular security audits
• Access controls and monitoring

9. Your Rights

All Users:

• Access your personal data
• Correct inaccurate data
• Request data deletion
• Export your data
• Opt-out of marketing communications

EEA/GDPR Users:

• Object to data processing
• Restrict processing
• File a complaint with your supervisory authority

California/CCPA Users:

• Know what personal information is collected
• Know whether personal information is sold or disclosed
• Request deletion of personal information
• Opt-out of the sale of personal information

10. Data Breach Notification

In the event of a data breach that may affect your rights, we will notify affected users and relevant authorities within 72 hours, as required by applicable law.

11. Children's Privacy

Our service is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us immediately.

12. Policy Updates

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: privacy@leddit.com