Privacy Policy

1. Introduction

Social Commandments ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy describes what we collect, how we use it, and the rights you have regarding your data when you use our website or services ("Service").

2. Information We Collect

2.1 Personal Information

We collect the following information when you create or manage an account:

• Email address
• Name (optional)
• Authentication data from third-party login providers (e.g., Google, GitHub)
• Payment information processed securely by Stripe (we never store full card details)

2.2 Usage Data

When you interact with the Service, we automatically log:

• IP address and approximate location
• Device and browser information
• Pages viewed and features used
• Time spent in the product
• Referring URLs and campaign attribution
• Event-level analytics (e.g., button clicks, search terms)

2.3 Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember preferences
• Analyze product performance and usage

You may block cookies in your browser, but the Service may not function correctly.

3. How We Use Your Information

We use your data to:

• Provide, maintain, and improve the Service
• Authenticate your account and manage subscriptions
• Process payments via Stripe
• Deliver personalized features and recommendations
• Communicate product updates, billing notices, and support responses
• Diagnose issues, prevent fraud, and ensure platform security
• Comply with legal and regulatory obligations

4. Information Sharing

4.1 Service Providers

We share data only with trusted third parties who help us operate the Service. These include:

• Stripe for secure payment processing
• Authentication providers (Google, GitHub)
• Analytics platforms for understanding usage and improving user experience
• Hosting and infrastructure providers (e.g., Vercel, Neon, Supabase)

These parties may access your data solely to perform tasks on our behalf and are obligated not to use it for other purposes.

4.2 Legal Disclosure

We may disclose information when required to comply with law, regulation, subpoena, or to protect our rights, users, or the security of the Service.

4.3 Business Transfers

If Social Commandments is involved in a merger, acquisition, or asset transfer, user data may be transferred as part of the transaction.

5. Data Security

We use industry-standard safeguards to protect your data, including:

• Encryption in transit and at rest
• Access controls and least-privilege permissions
• Regular security reviews and updates
• PCI-compliant payment processing through Stripe

No online service is completely secure, but we take reasonable steps to protect your information.

6. Data Retention

We retain personal data only as long as necessary to operate the Service or comply with legal requirements. When data is no longer required, we delete or anonymize it.

If you delete your account, most data is removed immediately, and remaining data is purged once no longer needed for legitimate business or legal purposes.

7. Your Rights

7.1 Access & Control

Depending on your jurisdiction, you may:

• Access the personal data we hold about you
• Request correction or deletion
• Request a portable copy of your data
• Object to or restrict certain processing
• Withdraw consent where applicable

To submit a request, contact us using the instructions in Section 14.

7.2 Marketing Preferences

You can opt out of marketing emails at any time using the link in the email or by contacting support.

7.3 Cookie Controls

You may manage or block cookies via your browser. Blocking essential cookies may impact Service functionality.

8. International Data Transfers

We may process your information in countries outside your residence. When we do, we rely on recognized legal mechanisms (such as Standard Contractual Clauses) to safeguard your data.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect data from children under 13. If we become aware of such data, we delete it promptly.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing personal information.

11. California Privacy Rights (CCPA)

If you are a California resident, you may request:

• Information about the personal data we collect and how it is used
• Deletion of personal data
• Opt-out of data selling (we do not sell personal data)
• Equal service and pricing regardless of privacy choices

12. European Privacy Rights (GDPR)

Users in the EEA or UK are entitled to GDPR rights including:

• Access, correction, or deletion
• Data portability
• Objecting to or restricting processing
• Withdrawal of consent
• Lodging a complaint with a supervisory authority

13. Changes to This Policy

We may update this Privacy Policy periodically. When changes are material, we will notify you by email or through the Service. The "Last Updated" date at the top reflects the most recent revision.

14. Contact Us

For privacy questions or requests, contact us through the support channels on our website.

Please include "Privacy Request" in the subject line for faster processing.