Privacy Policy
Last Updated: [DATE]
1. Introduction
crosspostkit ("we", "us", or "our") operates the website crosspostkit.com and the crosspostkit platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and handling your data transparently.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your name, email address, and profile image. Account authentication is managed by our third-party authentication provider, Clerk. If you sign up using a social login provider (such as Google), we receive the profile information you authorize that provider to share.
2.2 Project Information
During use of the Service, you may provide project names, descriptions, and other information related to your use of the platform.
2.3 Payment Information
Payments are processed by LemonSqueezy. We do not directly collect or store your credit card number or full payment details. We receive and store order identifiers, customer identifiers, purchase amounts, currency, and credit transaction records from LemonSqueezy to manage your account balance.
2.4 Automatically Collected Information
- Usage Data: Pages visited, features used, click interactions, and time spent on the Service
- Device Information: Browser type, operating system, screen resolution, IP address, and user agent
- Cookies: Session data, consent preferences, and analytics identifiers (see Section 7 for details)
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process payments and manage your credit balance
- Send you transactional emails, including service updates
- Analyze usage patterns to improve the user experience and develop new features
- Detect, prevent, and address technical issues, fraud, and abuse
- Send you marketing communications (you can opt out at any time via email preferences or unsubscribe links)
4. Third-Party Services and Data Sharing
We share your information with the following categories of third-party service providers, solely for the purposes described in this policy:
4.1 Infrastructure and Database
We use Convex as our backend database and serverless functions provider. Your account data and project data are stored in Convex.
4.2 Authentication
Clerk manages user authentication, including sign-up, sign-in, session management, and account security. Clerk receives your name, email, and profile image.
4.3 Analytics
We use PostHog for product analytics. If you consent to analytics cookies, PostHog receives usage data. PostHog analytics are loaded only after you provide consent.
4.4 Payments
LemonSqueezy processes all payments. When you make a purchase, LemonSqueezy receives your email address, payment details, and billing information.
4.5 Email
We use Resend to deliver transactional and marketing emails. Your email address and name are shared with Resend for this purpose. You can manage your email preferences or unsubscribe at any time.
4.6 Legal and Business Transfers
We may disclose your information when required by law, to enforce our terms, or to protect our rights. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We do not sell your personal information to third parties.
5. Data Security
We implement appropriate technical and organizational measures to protect your information. These measures include:
- HTTPS encryption for all data in transit
- Authentication and authorization checks on all protected routes and API endpoints
- Webhook signature validation for all inbound webhooks
No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Portability: Request transfer of your data in a machine-readable format
- Objection: Object to processing of your data for specific purposes
To exercise any of these rights, please contact us at privacy@crosspostkit.com.
7. Cookies and Tracking Technologies
We use cookies and similar technologies on our Service. Our cookie consent banner allows you to manage your preferences before any non-essential cookies are set.
You can change your cookie preferences at any time by clearing your cookies and revisiting our website, at which point the consent banner will appear again.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Email: privacy@crosspostkit.com
Location: [Your Location]