| 1 | import type { Metadata } from 'next' |
| 2 | import { createMetadata } |
| 3 | |
| 4 | export const metadata: |
| 5 | title: 'Privacy Policy', |
| 6 | description: |
| 7 | 'How Saturn collects, uses, and protects your personal information.', |
| 8 | }) |
| 9 | |
| 10 | const lastUpdated = ' |
| 11 | |
| 12 | export default function PrivacyPage |
| 13 | return ( |
| 14 | <main className='mx-auto max-w-3xl px-6 py-16 |
| 15 | <article className='prose prose-neutral dark:prose-invert max-w-none |
| 16 | <h1>Privacy Policy</h1> |
| 17 | <p className='text-muted-foreground text-sm |
| 18 | Last updated: {lastUpdated} |
| 19 | </p> |
| 20 | |
| 21 | <p> |
| 22 | This Privacy Policy describes how Saturn ("Saturn", |
| 23 | "we", & |
| 24 | and shares information about you when you use our website, |
| 25 | applications, and services (collectively, the "Service"). By |
| 26 | using the Service, you agree to the collection and use of information |
| 27 | in accordance with this Policy. |
| 28 | </p> |
| 29 | |
| 30 | <h2>1. Information We Collect</h2> |
| 31 | <h3>Information you provide</h3> |
| 32 | <ul> |
| 33 | <li> |
| 34 | <strong>Account information:</strong> name, email address, password, |
| 35 | and profile picture when you sign up. |
| 36 | </li> |
| 37 | <li> |
| 38 | <strong>Workspace and content data:</strong> projects, clients, |
| 39 | invoices, expenses, time entries, files, and any other content you |
| 40 | create or upload. |
| 41 | </li> |
| 42 | <li> |
| 43 | <strong>Billing information:</strong> processed by our payment |
| 44 | partner (Polar). We do not store full payment card numbers. |
| 45 | </li> |
| 46 | <li> |
| 47 | <strong>Communications:</strong> messages you send to support or |
| 48 | feedback you submit through integrated tools (such as Featurebase). |
| 49 | </li> |
| 50 | </ul> |
| 51 | |
| 52 | <h3>Information we collect automatically</h3> |
| 53 | <ul> |
| 54 | <li> |
| 55 | <strong>Usage data:</strong> pages visited, features used, referring |
| 56 | URLs, device and browser type, and approximate location derived from |
| 57 | IP address. |
| 58 | </li> |
| 59 | <li> |
| 60 | <strong>Cookies and similar technologies:</strong> used for |
| 61 | authentication, preferences, and analytics. |
| 62 | </li> |
| 63 | <li> |
| 64 | <strong>Log data:</strong> server logs containing IP address, |
| 65 | timestamps, and request metadata. |
| 66 | </li> |
| 67 | </ul> |
| 68 | |
| 69 | <h3>Information from third parties</h3> |
| 70 | <p> |
| 71 | If you sign in with a third-party provider (e.g. GitHub), we receive |
| 72 | basic profile information from that provider in accordance with your |
| 73 | authorization. |
| 74 | </p> |
| 75 | |
| 76 | <h2>2. How We Use Your Information</h2> |
| 77 | <ul> |
| 78 | <li>To provide, operate, and maintain the Service.</li> |
| 79 | <li>To authenticate users and secure accounts.</li> |
| 80 | <li>To process payments and manage subscriptions.</li> |
| 81 | <li>To respond to support requests and feedback.</li> |
| 82 | <li> |
| 83 | To improve the Service, develop new features, and analyze usage. |
| 84 | </li> |
| 85 | <li>To send transactional emails and important account notices.</li> |
| 86 | <li> |
| 87 | To detect, prevent, and address fraud, abuse, or security issues. |
| 88 | </li> |
| 89 | <li>To comply with legal obligations.</li> |
| 90 | </ul> |
| 91 | |
| 92 | <h2>3. Legal Bases for Processing (EEA/UK Users)</h2> |
| 93 | <p> |
| 94 | If you are in the European Economic Area or the United Kingdom, we |
| 95 | process your personal data under the following legal bases: |
| 96 | performance of a contract, our legitimate interests (such as improving |
| 97 | and securing the Service), compliance with legal obligations, and your |
| 98 | consent where required. |
| 99 | </p> |
| 100 | |
| 101 | <h2>4. How We Share Information</h2> |
| 102 | <p> |
| 103 | We do not sell your personal information. We share information only as |
| 104 | described below: |
| 105 | </p> |
| 106 | <ul> |
| 107 | <li> |
| 108 | <strong>Service providers:</strong> trusted vendors who help us |
| 109 | operate the Service, including hosting (Railway), object storage |
| 110 | (Railway), email delivery(AWS SES), payments (Polar), analytics |
| 111 | (Databuddy), and feedback (Featurebase). These providers access |
| 112 | information only as needed to perform their functions. |
| 113 | </li> |
| 114 | <li> |
| 115 | <strong>Workspace members:</strong> content you submit to a |
| 116 | workspace is visible to other members of that workspace based on |
| 117 | their role and permissions. |
| 118 | </li> |
| 119 | <li> |
| 120 | <strong>Legal and safety:</strong> when required by law, legal |
| 121 | process, or to protect the rights, property, or safety of Saturn, |
| 122 | our users, or the public. |
| 123 | </li> |
| 124 | <li> |
| 125 | <strong>Business transfers:</strong> in connection with a merger, |
| 126 | acquisition, or sale of assets, subject to standard confidentiality |
| 127 | protections. |
| 128 | </li> |
| 129 | </ul> |
| 130 | |
| 131 | <h2>5. Data Retention</h2> |
| 132 | <p> |
| 133 | We retain personal data for as long as your account is active or as |
| 134 | needed to provide the Service. We may retain certain information after |
| 135 | account deletion to comply with legal obligations, resolve disputes, |
| 136 | and enforce our agreements. Backups are purged on a rolling schedule. |
| 137 | </p> |
| 138 | |
| 139 | <h2>6. Your Rights</h2> |
| 140 | <p> |
| 141 | Depending on your location, you may have the right to access, correct, |
| 142 | delete, restrict, or port your personal data, and to object to certain |
| 143 | processing. You may also withdraw consent where processing is based on |
| 144 | consent. To exercise these rights, contact us at{' '} |
| 145 | <a href='mailto:phantomknight287@proton.me |
| 146 | phantomknight287@proton.me |
| 147 | </a> |
| 148 | . You may also have the right to lodge a complaint with a supervisory |
| 149 | authority. |
| 150 | </p> |
| 151 | |
| 152 | <h2>7. Security</h2> |
| 153 | <p> |
| 154 | We implement reasonable technical and organizational measures to |
| 155 | protect your information, including encryption in transit, access |
| 156 | controls, and audit logging. No method of transmission or storage is |
| 157 | completely secure, and we cannot guarantee absolute security. |
| 158 | </p> |
| 159 | |
| 160 | <h2>8. International Transfers</h2> |
| 161 | <p> |
| 162 | Your information may be processed in countries other than the one in |
| 163 | which you reside. Where required, we use appropriate safeguards (such |
| 164 | as standard contractual clauses) for cross-border transfers. |
| 165 | </p> |
| 166 | |
| 167 | <h2>9. Children's Privacy</ |
| 168 | <p> |
| 169 | The Service is not directed to children under 16 (or the equivalent |
| 170 | minimum age in your jurisdiction). We do not knowingly collect |
| 171 | personal information from children. If you believe a child has |
| 172 | provided us with personal information, contact us so we can delete it. |
| 173 | </p> |
| 174 | |
| 175 | <h2>10. Cookies</h2> |
| 176 | <p> |
| 177 | We use cookies and similar technologies for essential functionality |
| 178 | (such as keeping you signed in), preferences, and analytics. You can |
| 179 | control cookies through your browser settings; disabling some cookies |
| 180 | may affect functionality. |
| 181 | </p> |
| 182 | |
| 183 | <h2>11. Changes to This Policy</h2> |
| 184 | <p> |
| 185 | We may update this Privacy Policy from time to time. If we make |
| 186 | material changes, we will provide reasonable notice. The "Last |
| 187 | updated" date at the top reflects the most recent revision. |
| 188 | </p> |
| 189 | |
| 190 | <h2>12. Contact</h2> |
| 191 | <p> |
| 192 | For questions about this Privacy Policy or our data practices, contact |
| 193 | us at{' '} |
| 194 | <a href='mailto:phantomknight287@proton.me |
| 195 | phantomknight287@proton.me |
| 196 | </a> |
| 197 | . |
| 198 | </p> |
| 199 | </article> |
| 200 | </main> |
| 201 | ) |
| 202 | } |