Overview

QuestionCrafter is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

Information We Collect

• Account information: When you sign in with Google, Supabase receives your account identifier, email address, name, and profile image.
• Questions and responses: We process your question, selected perspectives, generated responses, and iteration context. Signed-in journeys are stored in Supabase. A browser copy may also be stored locally so history and retries work.
• Usage and device data: We record feature events, request timing, quota usage, browser information, timezone, and account ID when you are signed in. Vercel also provides site analytics. These records are pseudonymous or account-linked, not fully anonymous.
• Network identifiers: Our infrastructure receives your IP address. The application derives purpose-specific keyed hashes for abuse prevention, anonymous quotas, and vote deduplication instead of intentionally storing raw addresses in application tables. Hosting-provider security logs may retain network data under their own policies.
• Library and leaderboard contributions: A journey becomes public only when you submit it to the library and it passes moderation. Leaderboard participation requires a separate opt-in and is off by default.
• Feedback and email sharing: Feedback may include the current question and generated answer. Email sharing sends the recipient address and selected journey content to EmailJS.

How We Use Your Information

• To provide and improve the QuestionCrafter service
• To maintain your question history across sessions
• To enforce usage quotas, deduplicate retried generations, and prevent abuse
• To communicate important service updates
• To moderate public contributions and investigate reliability or security incidents

Data Security

We use industry-standard security measures to protect your data:

• Production traffic is transmitted over HTTPS
• Authentication is handled by Supabase with secure JWT tokens
• Database access is protected by Row Level Security (RLS) policies
• Service-role database operations and privacy-sensitive RPCs are restricted to the backend
• We do not sell personal information

Your Rights

You have the right to:

• Access: Request a copy of your data
• Delete: Request deletion of your account and associated data
• Portability: Export your question history
• Opt-out: Use the service without an account (with limited features)
• Public participation: Decline leaderboard participation and request removal of your library contributions

Account deletion removes account-linked history, events, quota records, public submissions, comments, and votes before the authentication account is removed. Anonymous browser history is controlled from your browser and can be removed by clearing site data.

Retention

Account-linked journeys and settings are retained while your account is active or until you request deletion. Public contributions remain available until they are removed or your account data is deleted. Generation reservations and retry transcripts receive expiration timestamps and are eligible for scheduled removal after their operational purpose. Application and infrastructure logs are retained only as long as needed for security, reliability, and provider operations.

Contact Us

If you have questions about this privacy policy or want to exercise your data rights, please contact us through the feedback form in the app.