Privacy Policy

Information We Collect

Information You Provide Directly:

• Account Registration: When you create an account through Google OAuth, we collect your email address and display name.
• User Content: We collect and store all content you post to the Service, including text, photos, and videos.
• Post Metadata: We automatically record timestamps associated with your posts.

Information Collected Automatically:

• Device Information: We may collect information about the device you use to access the Service, including device type, operating system, and unique device identifiers.
• IP Address: We collect your IP address and other information about your connection to the Service.
• Usage Information: We collect information about how you interact with the Service, including features accessed and actions taken.
• Location Information: We may collect general location information based on IP address.

Analytics Data:

We use Cloudflare Web Analytics to understand how users interact with the Service. This may include information about pages visited, time spent on the Service, and referral sources. Cloudflare Web Analytics is designed to be privacy-focused and does not use cookies to track you across other websites.

Information We Do Not Collect

We do not collect sensitive personal information such as social security numbers, payment card information, or health data. We do not use cookies for tracking purposes beyond improving user experience and analytics.

How We Use Your Information

We use the information we collect exclusively to:

• Provide, maintain, and improve the Service
• Enhance user experience and develop new features
• Debug and troubleshoot technical issues
• Monitor and analyze trends and usage patterns
• Ensure the security and integrity of the Service
• Comply with legal obligations

We do not and will not:

• Sell your data to third parties
• Use your data for advertising or marketing purposes
• Share your data with advertisers or marketing partners
• Use your data for any purpose beyond providing and improving the Service

Data Sharing and Third-Party Service Providers

We work with third-party service providers to operate and improve the Service. These providers only have access to your data to the extent necessary to perform their services on our behalf. Currently, these providers include:

• Google OAuth: For account authentication
• Cloudflare: For infrastructure, security, and web analytics
• Supabase: For data storage and backend services
• Google Services: For various infrastructure and service needs

As we grow and add features (such as payment processing), we may add additional service providers. Any new providers will be subject to data protection agreements requiring them to use your data only for providing their services to us.

Data Retention

• Active Accounts: We retain your data for as long as your account is active.
• Deleted Accounts: Upon account deletion, your data is permanently deleted from our active systems. We maintain backups for operational continuity, but your data will be purged from these backups within a reasonable timeframe following account deletion.
• Inactive Accounts: If your account remains inactive (not accessed) for more than two years, we may archive or delete your account and associated data to manage storage and operating costs.

Your Data Rights and Control

Full Data Control:

You maintain full control over your data. You can:

• Delete individual posts at any time through the Service
• Delete your entire account at any time, which will result in permanent deletion of all associated data
• Manage your account settings and privacy preferences

Data Rights:

We strive to apply the same data rights to all customers, regardless of their location, including:

• Right to Know: You have the right to know what personal information we collect and how it is used
• Right of Access: You can request access to the personal information we hold about you
• Right to Correction: You can request correction of your personal information
• Right to Erasure: You can request deletion of your personal information, subject to certain limitations
• Right to Object: You can object to how or why your personal information is processed
• Right to Complain: You have the right to lodge a complaint with applicable data protection authorities

No Automatic Data Export:

We do not currently provide automated data export functionality. However, you have the ability to delete your data or your entire account whenever you choose. We may add data export functionality in the future.

California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). These rights are incorporated into this policy, and we comply with such requirements to the extent they apply.

Data Security

We implement industry-standard security measures to protect your data, including:

• SSL/TLS encryption for data transmitted between our servers and your device
• Regular backups and redundancies with encrypted database backups
• Access controls and authentication measures
• Secure data storage practices

However, no security measure is completely foolproof. We take data security seriously and continue to strengthen our protective measures. We plan to implement encryption of user data at rest in the future as part of our security roadmap. For now, most data in our database is not encrypted while stored, as it needs to be readily available to send to you when you need it.

Law Enforcement and Legal Requests

We are committed to protecting user privacy and will not voluntarily disclose personal information to law enforcement or government agencies without legal compulsion.

We may disclose user data only when:

• We receive a legally binding order, warrant, or subpoena from law enforcement
• We are required to do so by applicable law
• In emergency circumstances where we have reasonable evidence that accessing certain user data would prevent serious harm or facilitate justice

Our Policy on Government Requests:

• We do not respond to informal requests for user data
• We will only comply with properly served legal process (warrants, subpoenas, court orders)
• We will disclose only the minimum amount of information necessary to comply with the legal request
• We will notify affected users before disclosing their data, unless legally prohibited from doing so or in emergency situations
• We may appeal overly broad requests

In cases where we are compelled to disclose data, we will only disclose the minimum necessary information unless prohibited by law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by email or through the Service with advance notice where reasonably practicable. Your continued use of the Service following the posting of revised Privacy Policy means that you accept and agree to the changes.

Requesting Your Rights

To exercise any of your data rights outlined in this policy, or if you have questions about how we handle your information, please contact us at:

Email: support@maintain.social

We will take reasonable steps to verify your identity before responding to requests, which may include verifying your name and email address. If we are unable to verify you, we may be unable to respond to your requests.

Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain certain information to provide our services to you. In some cases, exercising certain rights (such as erasure) may result in the termination of your account.

Non-Discrimination

We do not and will not charge you a different amount, offer different discounts, or provide different levels of service because you have exercised your data privacy rights. However, the exercise of certain rights may, by virtue of your exercising those rights, prevent you from using our Services.