Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication provider (e.g., Google). If you sign in with Google, we receive your name and email from Google.

Usage Data

We collect information about how you interact with the Service, including pages visited, features used, and actions taken. This is collected via Usermaven analytics.

Content You Provide

We store the data you enter into the Service, including deal pipeline information, buyer profiles, task templates, organization settings, and documents you upload (via Supabase).

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To authenticate your identity and manage your account
• To process payments through Stripe
• To send transactional emails (via Resend)
• To analyze usage patterns and improve the product
• To comply with legal obligations

3. Data Storage and Processing

Your data is stored on Supabase (PostgreSQL database) in the United States (us-west-1 region). Authentication is handled by Supabase Auth. Files and documents you upload are stored in Supabase Storage. The application is hosted on Vercel.

4. Third-Party Services

We use the following third-party services to operate available.business:

• Supabase — Authentication, database, and file storage
• Vercel — Application hosting
• Stripe — Payment processing
• Resend — Email delivery
• Google — OAuth authentication provider
• Usermaven — Product analytics
• Documenso — NDA and document signing (when configured)

Each of these services has its own privacy policy. We encourage you to review them.

5. Data Retention

We retain your account information and content for as long as your account is active. If you delete your account, your data will be removed from our systems within 30 days. Some information may be retained in backups for up to 90 days.

6. Data Security

We implement appropriate technical and organizational measures to protect your data. All data is transmitted over HTTPS. Database access is protected by Row-Level Security (RLS) policies that ensure you can only access your own organization's data.

7. Your Rights

You have the right to:

• Access and download your data
• Correct inaccurate information
• Delete your account and associated data
• Opt out of non-essential communications
• Request information about how your data is processed

8. Cookies

We use essential cookies for authentication and session management. These cookies are required for the Service to function. We do not use advertising or tracking cookies beyond what is necessary for the Service to operate. Supabase, our authentication provider, also sets necessary cookies for session management and OAuth flows.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your data rights, contact us at privacy@available.business.