Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our Service, and information from other sources.

Information You Provide

• Account Information: Email address, name, password, and organization details
• Profile Information: Display name, role within your organization
• Content: Documents, blocks, translations, and other content you create or upload
• Communications: Feedback, support requests, and correspondence with us
• Payment Information: Billing details (when paid features become available)

Information Collected Automatically

• Usage Data: Pages viewed, features used, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, error logs, and performance data
• Cookies: Session cookies, analytics cookies, and preference cookies (see our Cookie Policy for details)

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Create accounts, store content, process requests
• Improve the Service: Analyze usage patterns, develop new features
• Communicate: Send service updates, respond to inquiries, provide support
• Security: Detect fraud, prevent abuse, ensure platform security
• Compliance: Meet legal obligations, enforce our Terms of Service
• Analytics: Understand user behavior, measure performance, optimize user experience

3. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Encryption: Data is encrypted in transit (TLS) and at rest
• Access Controls: Role-based access with row-level security
• Authentication: Secure password hashing and session management
• Monitoring: Continuous monitoring for security threats and errors
• Backups: Regular automated backups to prevent data loss

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party service providers to operate our Service. These providers may have access to your data as necessary to perform their functions:

Supabase (Database and Authentication)

• Purpose: Database hosting, user authentication, file storage
• Data Shared: All user data, content, and files
• Location: Servers may be located worldwide
• Privacy Policy: https://supabase.com/privacy

Vercel (Hosting and Analytics)

• Purpose: Application hosting, performance monitoring, web analytics
• Data Shared: Usage data, page views, performance metrics
• Analytics: Vercel Analytics and Speed Insights collect anonymized usage data
• Privacy Policy: https://vercel.com/legal/privacy-policy

Sentry (Error Tracking)

• Purpose: Error monitoring, performance tracking, debugging
• Data Shared: Error logs, stack traces, session replays (with text/media masked)
• Privacy: All text content and media are automatically masked in session replays
• Privacy Policy: https://sentry.io/privacy/

Resend (Email Delivery)

• Purpose: Sending transactional emails (invitations, notifications)
• Data Shared: Email addresses, recipient names, message content
• Privacy Policy: https://resend.com/legal/privacy-policy

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information and improve our Service. You can control cookies through your browser settings.

For detailed information about the cookies we use, please see our Cookie Policy.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

General Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request export of your data in a structured format
• Objection: Object to processing of your data for certain purposes

GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to restriction of processing
• Right to data portability
• Right to object to automated decision-making
• Right to lodge a complaint with a supervisory authority

CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your rights

Note: We do not sell your personal information to third parties.

How to Exercise Your Rights

To exercise any of these rights, please contact us at support@evergreendocs.app. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Account Data: Retained while your account is active
• Content: Retained until you delete it or close your account
• Logs and Analytics: Retained for 90 days
• Backup Data: May be retained in backups for up to 90 days after deletion

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Children's Privacy

Our Service is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from your country.

We use third-party services (Supabase, Vercel, Sentry) that may store data in multiple locations worldwide. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Privacy Shield Framework compliance (where applicable and valid)
• Adequacy decisions by data protection authorities

10. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification to your registered email address (for material changes)

You are advised to review this Privacy Policy periodically for any changes. Changes become effective when posted on this page.

11. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: support@evergreendocs.app

For data protection inquiries specific to GDPR or CCPA, please use the subject line "Privacy Rights Request" to ensure prompt handling.