Privacy Policy

Jay Digital ("we," "us," or "our") operates Previe, a content staging and publishing assistant. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. If you disagree with its terms, please discontinue use of Previe.

Previe is built on a local-first philosophy: the majority of your content lives on your device and never touches our servers unless you explicitly choose to sync. This policy is transparent about the limited data we do collect and why.

Information You Provide Directly

• Full name and username: provided at account registration
• Email address: used for account authentication and communications
• Password: hashed and stored securely by Supabase; we never see your plaintext password
• Profile avatar image: uploaded voluntarily to Supabase Storage
• Social media platform access tokens: when you connect a platform account

Information Collected Automatically

• Account creation date and trial start date: recorded at signup
• Authentication session data: managed via secure, HTTP-only cookies by Supabase
• Temporary OAuth state values: short-lived cookies used only during platform connection flows, deleted immediately after

Information We Do NOT Collect

Unless you enable cloud sync (a future premium feature), we do not collect or store your content entries, captions, notes, media files, or any creative work you produce in Previe. This data lives exclusively on your device.

We use the information we collect to:

• Create and manage your account
• Authenticate your identity and maintain your session
• Process subscription payments through Stripe
• Send transactional emails: account verification, password reset, billing notices
• Facilitate connections to social media platforms on your behalf
• Enforce our Terms of Service and prevent fraudulent or unauthorized activity
• Respond to your questions, support requests, and communications
• Improve and develop the Service

We do not sell your personal information. We do not use your information for advertising targeting on any platform. We do not use your information to train AI models without your explicit consent.

Previe is designed with a local-first architecture. Your content entries, captions, notes, and media files are stored directly on your device using your browser's localStorage and IndexedDB APIs. This means:

• Your creative content is not transmitted to our servers during normal use
• We cannot access, read, or recover locally stored content
• If you clear your browser data or uninstall the app, locally stored content may be permanently lost: we recommend exporting or backing up important work
• Different devices do not automatically share content unless cloud sync is enabled

Cloud synchronization, when available as a premium feature, will be an explicit opt-in and will be disclosed separately with its own data handling terms.

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers: with trusted third-party vendors who help us operate the Service (Supabase, Stripe, Cloudflare), subject to confidentiality obligations
• Legal requirements: if required to do so by law, court order, or governmental authority
• Protection of rights: to protect the rights, property, or safety of Jay Digital, our users, or the public
• Business transfers: in connection with a merger, acquisition, or sale of assets, with advance notice provided to affected users

Previe relies on the following third-party services to operate. Each has its own privacy policy:

Supabase

Provides authentication, database storage, and file storage. Your account credentials, profile data, and platform connection tokens are stored with Supabase. Data may be stored in the United States and European Union. Privacy policy: supabase.com/privacy

Cloudflare Turnstile

Used on authentication forms to verify that users are human and prevent bot abuse. Turnstile is privacy-preserving and does not use tracking cookies or build user profiles. Privacy policy: cloudflare.com/privacypolicy

Stripe

Processes subscription payments when the paid tier is active. Payment card information is handled entirely by Stripe and never passes through our servers. Privacy policy: stripe.com/privacy

When you connect a social media account (X, LinkedIn, Facebook, Instagram, Threads, TikTok, or YouTube), we receive and store an access token from that platform. This token allows Previe to post content on your behalf when you request it. Specifically:

• Access tokens are stored encrypted in our Supabase database
• Tokens are only used to perform actions you explicitly initiate: we do not post, read, or monitor your social accounts without your instruction
• We store the platform username and user ID to identify the connected account in your settings
• You can revoke any connection at any time from Settings → Social Platforms, which immediately deletes the stored token
• Revoking in Previe does not revoke our app authorization on the platform itself: you should also revoke that directly in each platform's app permissions settings

We implement industry-standard security measures to protect your information:

• Passwords are hashed using bcrypt and never stored in plaintext
• All data in transit is encrypted using TLS/HTTPS
• Authentication uses secure, HTTP-only, SameSite cookies
• Social media access tokens are stored with row-level security: only you can access your own tokens
• OAuth flows use state parameters and PKCE (where supported) to prevent cross-site request forgery

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data (email, name, username): retained until account deletion
• Profile avatar: retained until replaced or account deleted
• Social media tokens: retained until you disconnect the platform or delete your account
• Payment records: retained as required by applicable tax and financial regulations (typically 7 years)
• Authentication logs: retained for up to 90 days for security purposes

To delete your account and all associated data, contact us at hello@jaydigital.us. We will process deletion requests within 30 days, subject to any legal retention obligations.

Depending on your location, you may have the following rights regarding your personal information:

All Users

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal information
• Portability: request your data in a portable, machine-readable format
• Objection: object to our processing of your data in certain circumstances

California Residents (CCPA)

California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

EU/UK Residents (GDPR/UK GDPR)

EU and UK residents have the right to lodge a complaint with their local data protection authority. Our lawful basis for processing is performance of a contract (to provide the Service) and legitimate interests (security, fraud prevention).

To exercise any of these rights, contact us at hello@jaydigital.us. We will respond within 30 days.

Previe is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe your child has provided personal information to us, please contact us at hello@jaydigital.us.

Your information may be transferred to and processed in countries other than the country in which you reside. Our primary data processors (Supabase) operate in the United States and European Union. By using Previe, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

For users in the EEA or UK, transfers outside your region are conducted with appropriate safeguards such as Standard Contractual Clauses.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you by email. We encourage you to review this policy periodically.

Your continued use of the Service after any changes become effective constitutes your acceptance of the revised Privacy Policy.

For any privacy-related questions, requests, or concerns, please contact us:

• Email: hello@jaydigital.us
• Website: jaydigital.us
• Jay Digital: Independent Multidisciplinary Digital Artist, USA