Beta privacy notice

Policy version: beta-2026-11-01

Local beta policy. Operator identity and public contact details are still pending. Live numbers, real payment collection and a commercial launch are not enabled.

Information processed

The beta stores your name, email address, password hash, policy consent version and time, email-verification status, hashed session/action tokens, simulated activation and wallet history, and support messages you submit. Basic request/security logs can include IP addresses and request paths. We do not request card details, identity documents, social passwords or real SMS codes.

Why it is processed

This information supports sign-in, verification, password recovery, an auditable simulated wallet, order history, abuse controls and private support conversations. Account and service emails are transactional, not marketing consent.

Storage and service providers

Local development uses a SQLite database and a private email outbox on the operator’s machine. A Vercel deployment requires a separate durable PostgreSQL database and a configured email delivery service. Real customer payment collection is disabled. The exact production database region, email processor and payment processing arrangements must be disclosed before public commercial use.

Email links and security

Passwords are stored as salted hashes, not plaintext. Session and email-action tokens are hashed in the database. The local development outbox contains usable action links and is private operator data; it must never be published or committed. A hosted deployment must not use a filesystem outbox.

Support data

Messages are visible to your account and the operator handling the ticket. Do not send passwords, verification codes, card details or identity documents. Avoid including unnecessary information about third parties.

Retention and requests

A final retention schedule is not yet established. Beta data may remain until the environment is reset or an operator handles a request. You can use a support ticket to request access, correction, closure or deletion review. Automated export/deletion is not provided in this beta, and financial/security record obligations will need review before launch.

Cookies and browser storage

An HTTP-only session cookie keeps you signed in. Theme preference is stored in your browser. No advertising or marketing analytics are added by this build. Necessary authentication storage is not an advertising opt-in.

Operator details

The public operator name, privacy contact, hosting region, production processors, retention periods and applicable legal basis must be confirmed before public onboarding. This notice accurately describes the beta but is not a completed production privacy assessment.