privacy policy

Account information

• Email address and authentication identifiers (Supabase Auth)
• Password hash (if you sign up with email/password — we never store plain passwords)
• Google account identifier (if you use Google OAuth)
• Email verification status

Billing information

• Stripe customer ID, subscription status, plan type, and payment metadata
• We do not receive or store full credit/debit card numbers — Stripe handles card data

Extension and coaching usage

• Plan entitlements and trial-used flag
• AI usage metadata (feature name, provider, token counts, timestamp) — not full prompt or response text
• Extension pairing codes (temporary, for device linking)

Information that stays on your device

• Space Q&A, drafts, comment plans, and campaign data — stored in Chrome local storage
• Subreddit pages you visit are read locally by the extension to provide coaching — not uploaded as a browsing history log

Automatically collected

• Standard server logs (IP address, user agent, request timestamps) for security and debugging
• Cookie/local storage for session authentication on the website

• Create and manage your account
• Enforce plan limits (trial vs Pro) and prevent abuse
• Process payments and subscriptions through Stripe
• Provide hosted AI coaching through our secure server proxy
• Pair the Chrome extension with your account
• Respond to support requests and legal obligations
• Improve reliability and security (aggregated metadata only)

We do not use your data for advertising, sell personal information to data brokers, or train general-purpose AI models on your draft content.

We share information only with service providers necessary to operate OrganiqReddit:

We may also disclose information if required by law, court order, or to protect rights, safety, and security.

• Encrypted transit (TLS/HTTPS) for all website, API, and extension communication with our servers
• Server-side API calls to payment and AI providers — your browser extension never receives our provider API keys
• Database access controls — row-level security on Supabase; service-role access only on the server for billing webhooks
• No public disclosure of personal data except as you choose to post on Reddit yourself

• HTTPS everywhere on https://organiqreddit.com
• Supabase Auth with email verification before paid access
• Stripe PCI-compliant checkout — card data never touches our servers
• Server-side AI proxy — API keys stored in environment secrets, not in client code
• We do not persist full coaching prompt/response text on our servers by default
• Access to production systems limited to authorized personnel

No method of transmission or storage is 100% secure. Report suspected breaches to privacy@organiq.space.

• Account data: retained while your account is active, then deleted on request
• Billing records: retained as required for tax and legal compliance
• AI usage metadata: retained in aggregate for abuse prevention; deletable on account deletion request
• Local extension data: remains on your device until you uninstall or clear extension storage

Depending on your location (including India and the EU), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated server data
• Withdraw consent where processing is consent-based
• Lodge a complaint with a supervisory authority

Email privacy@organiq.space from your account address. We respond within 30 days.

OrganiqReddit is not directed at children under 18. We do not knowingly collect data from minors.

Our service providers may process data in the United States and other countries. We use providers with appropriate safeguards (standard contractual clauses or equivalent).

We may update this policy. The "Last updated" date will change and material updates may be emailed to registered users.

Data controller: OrganiqSpace
Privacy: privacy@organiq.space
Support: support@organiq.space
Customer Support page