Privacy Policy

1. Information We Collect

Account Information

When you sign in through Patreon OAuth, we receive and store the following information from your Patreon account:

• Your name
• Your email address
• Your Patreon membership tier

Usage Data

We may collect information about how you interact with the service, including:

• Pages visited and features used
• Timestamps of interactions

Technical Data

When you access the service, we may automatically collect:

• IP address
• Browser type and version
• Device type and operating system

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the service
• Authenticate your identity and manage your subscription access based on your Patreon membership tier
• Improve, personalize, and optimize the service and user experience
• Communicate with you about your account, including service updates and security alerts
• Detect, prevent, and address technical issues and security incidents

3. Information Sharing

We do not sell, rent, or trade your personal information to third parties. We share your information only with the following service providers, solely to operate the service:

• Patreon — for payment processing, subscription management, and authentication via OAuth
• Vercel — for hosting and content delivery of the web application
• MongoDB Atlas — for secure cloud data storage

We may also disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).

4. Cookies

We use only strictly necessary cookies required for the service to function. Specifically, we use a NextAuth session cookie to authenticate your identity and maintain your logged-in session.

We do not use any tracking, analytics, advertising, or marketing cookies. No third-party cookies are set by our service.

You can manage cookies through your browser settings. However, disabling the session cookie will prevent you from signing in to the service.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide you with the service.

If you request deletion of your account, we will delete your personal data within 30 days of receiving the request. Some data may be retained in anonymized or aggregated form where it cannot be used to identify you.

6. Your Rights (GDPR)

If you are a resident of the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — request a machine-readable copy of your data
• Right to object — object to our processing of your personal data
• Right to withdraw consent — withdraw your consent at any time where processing is based on consent

To exercise any of these rights, please contact us at contact@savantalpha.com. We will respond to your request within 30 days.

7. Your Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act provides you with the following rights:

• Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to delete — request deletion of your personal information
• Right to opt-out of sale — we do not sell your personal information, so this right is automatically satisfied
• Right to non-discrimination — we will not discriminate against you for exercising your privacy rights

To exercise any of these rights, please contact us at contact@savantalpha.com. We will verify your identity and respond within 45 days as required by the CCPA.

8. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encrypted data transmission using HTTPS/TLS
• Secure authentication via OAuth (no passwords stored)
• Access controls and authentication for data storage systems

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in the United States, where our service providers operate. If you are located outside the United States, please be aware that data protection laws in the United States may differ from those in your jurisdiction.

By using the service, you consent to the transfer of your information to the United States. We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy.

10. Children's Privacy

The service is not intended for anyone under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected personal data from a minor, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. Your continued use of the service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

12. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

contact@savantalpha.com