Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address when you sign up
• Episode Content: Topics, preferences, and settings for episodes you create
• Payment Information: Processed securely by Stripe (we don't store credit card numbers)

1.2 Automatically Collected Information

• Device Information: Device type, OS version, unique device identifiers
• Usage Data: Episodes listened to, playback position, preferences
• Technical Data: IP address, browser type, access times
• Analytics: How you use the Service to improve user experience

2. How We Use Your Information

We use collected information to:

• Provide and improve the Service
• Generate personalized episode recommendations
• Process payments and manage subscriptions
• Send transactional emails (magic links, receipts, notifications)
• Prevent fraud and abuse
• Analyze usage patterns and optimize performance
• Comply with legal obligations

3. Data Sharing & Third Parties

3.1 Service Providers

We share data with trusted third-party service providers:

• Supabase: Authentication and file storage
• Stripe: Payment processing
• OpenAI: AI content generation (topics only, not personal data)
• Render: Infrastructure hosting
• Vercel: Web application hosting

3.2 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3.3 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights and safety.

4. Data Storage & Security

Storage Location: Data is stored on servers in the United States (Render, Supabase).

Security Measures: We use industry-standard security including:

• HTTPS/TLS encryption for data in transit
• Database encryption at rest
• Access controls and authentication
• Regular security audits
• Secure password storage (hashed with bcrypt)

Data Retention: We retain account data while your account is active. Episodes and usage data are retained for analytics. You may request deletion at any time.

5. Your Privacy Rights

5.1 Access & Portability

You have the right to access your personal data and request a copy in a portable format.

5.2 Correction & Deletion

You may update your account information at any time. You may request account deletion by contacting support@superlore.ai. Deletion is permanent and includes all episodes and data.

5.3 Marketing Communications

You may opt out of marketing emails while still receiving transactional emails (receipts, magic links, etc.).

5.4 GDPR Rights (EU Users)

If you are in the European Union, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

5.5 CCPA Rights (California Users)

California residents have the right to:

• Know what personal information is collected
• Know if personal information is sold or disclosed
• Opt-out of sale of personal information (we don't sell data)
• Request deletion of personal information
• Non-discrimination for exercising privacy rights

6. Cookies & Tracking

Essential Cookies: We use localStorage and cookies to maintain your session and preferences.

Analytics: We use Vercel Analytics to understand how users interact with the Service. This data is anonymized.

Your Control: You can disable cookies in your browser settings, but this may limit functionality.

7. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect data from children under 13. If we learn we have collected such data, we will delete it immediately.

8. International Users

Superlore is operated from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

9. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. The "Last Updated" date at the top indicates when this policy was last revised.

10. Contact Us

For privacy-related questions, data requests, or to exercise your rights, contact:

Email: privacy@superlore.ai
Support: support@superlore.ai
Website: superlore.ai