Privacy Policy

Last updated: [DATE]

This policy explains how [COMPANY LEGAL NAME] ("we") handles personal information for StratGraph.

What we collect

• Account data: your email address, used to sign you in and send the daily email you subscribe to.
• Founding list: if you join it, your email, the plan and price you saw, and (optionally) the price you told us you would pay. We use it only to tell you when subscriptions open.
• Payment data: handled by our payment provider ([Lemon Squeezy / Paddle / Stripe]). We receive your subscription status and a customer ID; we never see or store your full card number.
• Usage data: pages viewed, clicks on sign-up and checkout buttons, a random identifier stored in your browser, the referring page, and campaign tags in links you arrive from (such as utm_source). We use this to understand which content is useful and which channels bring readers.
• Email engagement: whether daily emails are delivered.

We do not collect sensitive personal information, and we do not knowingly collect information from children under 16.

How we use it

To provide and secure the Service, process subscriptions, send the emails you asked for, measure and improve content, and comply with law. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. [IF GOOGLE ANALYTICS IS ENABLED, DESCRIBE IT HERE AND ADD A COOKIE NOTICE.]

Service providers

We use processors who handle data on our behalf under contract: Supabase (database and sign-in), [Lemon Squeezy / Paddle / Stripe] (payments; Lemon Squeezy and Paddle act as merchant of record and process your data under their own privacy policies), Resend (email delivery) and Cloudflare (website hosting).

Retention

Account and billing records are kept while your account is active and as required for tax and accounting. Usage events are kept for up to 24 months.

Your rights

You can access, correct or delete your personal information, or close your account, by emailing [CONTACT EMAIL]. California residents have rights under the CCPA/CPRA, including to know, delete, correct and opt out of sale or sharing (we do neither). We will not discriminate against you for exercising these rights.

Security

Data is encrypted in transit, and access is restricted by role. No system is perfectly secure.

Changes and contact

We will post updates here. Questions: [CONTACT EMAIL]