Privacy Policy

What we collect

• Account information: email address and password (managed by Supabase Auth).
• Company data: the firm names and competitors you enter during onboarding and account management.
• Digest delivery data: which digests were sent and whether they were opened or bounced (via Resend).
• Billing data: subscription status managed by Stripe. We do not store full card numbers.
• Analytics and usage data: anonymized event signals (e.g., which digest sections you interact with, CTA clicks) used to improve the product. No personally identifiable information is included in these events. Events are logged to the browser console in development and sent to no third-party service at this time.

Why we collect it

We use your email to deliver weekly digests and transactional messages (billing receipts, account notices). We use the firm names you provide to match official public records and assemble your digest. We do not use your data for advertising.

Who we share it with

We share data only with the service providers necessary to operate FDA Recall Radar:

• Supabase — database and authentication.
• Resend — transactional email delivery.
• Stripe — payment processing and subscription management.
• Vercel — application hosting.
• Anthropic — LLM summarization of official public records (inputs are public government data, not your personal information).

We do not sell your data to third parties.

How long we keep it

Account data is retained while your subscription is active and for 90 days after cancellation, after which it is deleted on request. Digest HTML and source records are retained for 12 months to support the audit trail required by our legal-safety design.

Your rights

You may request deletion of your account and associated data at any time by emailing us. You may unsubscribe from digest emails at any time via the unsubscribe link in any digest.

Cookies

We use a single session cookie to keep you signed in. We do not use tracking or advertising cookies.