Privacy Policy

StrandQuote ("we," "our," or "us") operates the StrandQuote web application accessible at strandquote.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our application.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

Account Information. When you create an account, we collect your email address and any profile details you provide.

Project Data. We store the lighting designs and mockup projects you create, including any background photos you upload to the Service.

Payment Information. Subscription payments are processed by Stripe, Inc. We do not store your credit card number or payment credentials — Stripe handles all payment data under their own privacy policy and PCI-DSS compliance program.

Usage Data. We automatically collect certain information when you access the Service, including your IP address, browser type, operating system, referring URLs, and pages visited. This is collected in aggregate via Vercel Analytics and does not use cookies or persistent tracking.

Communications. If you contact us by email, we retain the content of your message and your contact details to respond to you.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send related information (receipts, invoices, subscription notices)
• Send transactional emails such as account confirmation, password resets, and trial expiry notices
• Monitor and analyze usage and performance to improve the Service
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations
• Respond to customer support requests

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Your account data and project designs are stored on servers provided by Supabase, Inc. (database and file storage) and Vercel, Inc. (application hosting), both of which are SOC 2-compliant cloud providers operating in the United States.

Images you upload are stored in a private cloud storage bucket accessible only to your account. We implement industry-standard technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), row-level security database policies, and JWT-based authentication.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

The Service integrates with the following third-party providers. Each operates under its own privacy policy:

• Supabase — database, authentication, and file storage (supabase.com/privacy)
• Stripe — payment processing (stripe.com/privacy)
• Vercel — application hosting and analytics (vercel.com/legal/privacy-policy)

The Service uses minimal tracking. Vercel Analytics collects anonymized, aggregate page-view data without placing cookies on your device and without tracking you across other websites. We do not use advertising cookies, third-party tracking pixels, or behavioral advertising networks.

Supabase Auth uses a session token stored in your browser's local storage to keep you signed in. This is not a cookie and is not shared with third parties.

We retain your account data and designs for as long as your account is active or as needed to provide the Service. If you cancel your subscription, your saved designs remain accessible and are not automatically deleted. If you request account deletion, we will delete your personal data and project files within 30 days, except where we are required to retain it for legal or accounting purposes.

Depending on your location, you may have certain rights regarding your personal data, including:

• Access — Request a copy of the personal data we hold about you
• Correction — Request that we correct inaccurate data
• Deletion — Request that we delete your account and associated data
• Portability — Request your project data in a portable format
• Objection / Opt-Out — Opt out of any future marketing communications

To exercise any of these rights, email us at support@strandquote.com. We will respond within 30 days.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date and, where appropriate, by sending you an email. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

StrandQuote
Email: support@strandquote.com