Privacy Policy

Authentication is managed through secure session flows and user-specific access checks.

Sensitive secrets such as provider keys remain on server runtime and are not exposed to client bundles.

Operational logs may include technical diagnostics but should not include passwords or payment card details.

Third-party services such as Supabase, Stripe, and notification providers may process data under their own terms.

Users may request support for account and subscription-related data handling through published support channels.