Privacy Policy

Effective July 2026 · Plain-English draft — have your lawyer review before relying on it.

The short version: we collect what we need to run your orders, we don't sell your data, and you can delete your account (and your data) whenever you want.

1. What we collect

Account data: email, username, password hash (via Supabase Auth) or your Google account identifier if you sign in with Google.

Order data: target URLs, anchor texts, briefs, and files you attach. Payment data is handled entirely by Stripe — we only store order totals and payment status.

Usage data: basic analytics about how the site is used, to keep it fast and find what's broken.

2. How we use it

To fulfill orders, provide support, send transactional emails (order updates, receipts), and — only if you subscribed — a newsletter you can leave with one click.

We never sell personal data. We share it only with processors needed to run the service: Supabase (database & auth), Stripe (payments), and our email provider.

3. Retention & deletion

Delete your account from Settings: it's deactivated immediately and permanently deleted after 90 days (the window in which you can restore it by logging back in). Invoices we're legally required to keep are retained per tax law.

4. Cookies

We use a small number of cookies: session cookies to keep you logged in and lightweight analytics to measure what's working. No creepy cross-site tracking.

5. Your rights

You can request a copy of your data, correct it, or erase it — email support@speka.io. If you're in the EU/UK, GDPR rights apply; in California, CCPA rights apply.