1. Introduction

This Privacy Policy explains how PostAuth ("we", "us") collects, uses, and protects your information when you use our Service.

2. Information We Collect

We collect the following types of information:

• Account information: email address, name, organization details
• Waitlist and lead information: email addresses and other details submitted through our waitlist, contact forms, blog or newsletter subscriptions, and free tools
• Usage data: pages visited, features used, session activity
• User data synced from auth providers: user profiles, activity signals from connected Clerk, Supabase, or Better Auth accounts
• Email data: emails sent through connected Gmail or Outlook accounts, with tracking metadata

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Communicate with you about the Service
• Send marketing and promotional communications, including launch announcements, product news, feature updates, and special offers
• Improve and personalize your experience
• Detect and prevent fraud or abuse

4. Marketing Communications

We may use email addresses collected through our waitlist, account registration, blog or newsletter subscriptions, free tools, and other contact forms to send marketing communications, including launch announcements, product news, feature updates, special offers, and educational content.

You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us at team@postauth.app. We will continue to send you transactional or service-related messages (such as security notices, account confirmations, and unsubscribe receipts) as necessary to operate the Service.

5. Data Sharing

We do not sell your personal information. We may share information with:

• Service providers who help us operate the Service (subject to confidentiality obligations)
• Law enforcement when required by law

6. Data Security

We implement reasonable security measures to protect your data, including encryption at rest for sensitive fields like OAuth grants.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your account and associated data
• Export your data

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion at any time.

9. Third-Party Services

The Service integrates with third-party auth and email providers. Their handling of your data is governed by their own privacy policies.

10. International Transfers

Your information may be transferred to and processed in countries other than your own.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes.

12. Contact

For privacy questions, contact us at team@postauth.app.