Privacy policy

What we collect from you, as a tenant

When you create an account we store your email address and hashed credential through Supabase Auth, and your tenant membership and role in autosugges.tenant_members. Actions that change something durable — publishing a version, granting a subscription, rotating a key — are written to an internal audit log for accountability.

What we collect about your end users

Autocomplete query and selection activity is recorded as aggregate signal — which canonical item was shown and which was picked — to improve future ranking. It is associated with a request id, not an end-user identity, and Phase 1 builds no per-user profile or personalization. This aggregate signal is written to autosugges_private.selection_events and processed asynchronously, off the request path your users wait on.

Bot and abuse protection

Cloudflare Turnstile runs at sign-up and key provisioning to distinguish humans from automated abuse. It never runs per keystroke on the autocomplete path.

Billing data

Payment details are handled by Stripe directly — we do not store card numbers. AutoSugges keeps its own record of your plan and entitlement, reconciled against Stripe's records rather than read live from them on every request.

Where data lives, and for how long

Account, list and control-plane data lives in Supabase PostgreSQL, isolated to your tenant by row-level security that is both enabled and forced. Compiled, published artifacts also live in Cloudflare Workers KV so they can be served from the edge. The active published version plus the five most recently superseded versions are retained; a superseded artifact is deleted from KV 30 days after it is deactivated.

Sub-processors

• Supabase — System of record (PostgreSQL) for account and tenant data, and authentication (Supabase Auth / GoTrue) for sign-in.
• Cloudflare — Edge runtime (Workers), compiled artifact storage (Workers KV) and bot/abuse challenge (Turnstile) at sign-up and key provisioning.
• Stripe — Payment processing and subscription billing.
• Bird — Delivery of transactional email (e.g. account and billing notifications).

Governing jurisdiction

These terms are governed by the jurisdiction of the operator: [jurisdiction to be determined by the operator].

Contact

Questions about this policy, or a request about your data, go to support@autosugges.com.