Privacy Policy

1. Information We Collect

We collect minimal data necessary to maintain your simulation progress, authenticate your account, and manage your Pro subscription:

• Account Data: Email address, unique username, and encrypted password hash (managed securely via Supabase Auth).
• OAuth Data: If you choose to sign in with Google or GitHub, we receive your public avatar URL and verified primary email.
• Simulation Telemetry: Scenario decisions, incident survival scores, and checklist progress to provide progress syncing.
• Payment Information: All billing and card processing is handled directly by our PCI-DSS certified payment gateway (Razorpay). We never store, process, or have access to your credit/debit card numbers or CVV.

2. How We Use Your Data

We use your data solely for:

• Authenticating your sessions and syncing your checklist roadmap across devices.
• Delivering subscription receipts and renewal notices.
• Monitoring application stability and preventing unauthorized access.

3. Data Sharing & Third-Party Processors

We do not sell, rent, or monetize your personal data. We utilize trusted infrastructure service providers:

• Supabase: Encrypted PostgreSQL database and authentication infrastructure.
• Razorpay: Secure payment processing and recurring subscription management.
• Resend: Transactional email delivery.
• Cloudflare Turnstile: Privacy-preserving automated bot defense.

4. Data Retention & Account Deletion

You have full control over your data. You may delete your account and all associated telemetry at any time via your Account Settings page. Upon deletion, your database records and subscriptions are immediately and permanently removed.

5. Contact

If you have questions regarding our privacy practices, contact us at privacy@savethesystem.site.