Privacy Policy

Introduction

Welcome to SuperDesign Platform. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered development platform.

By using SuperDesign Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account
• Use our services and create projects
• Contact us for support
• Subscribe to our newsletter or marketing communications

This information may include:

• Name and email address
• Authentication credentials
• Profile information
• Team and organization details
• Payment and billing information

Usage Data

We automatically collect certain information when you use our platform:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed)
• Usage patterns and interaction data
• Performance metrics and error logs

Project and Content Data

When you use our platform, we collect and store:

• Project files and code you create or upload
• AI chat conversations and prompts
• Version history and project metadata
• Collaboration and team activity data

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our services
• To process your transactions and manage your account
• To improve and optimize our platform and user experience
• To train and improve our AI models and features
• To communicate with you about updates, security alerts, and support
• To detect and prevent fraud, abuse, and security issues
• To comply with legal obligations and protect our rights
• To analyze usage patterns and platform performance

Third-Party Services

We use the following third-party services to provide and improve our platform:

Supabase (Authentication)

We use Supabase for user authentication and account management. Your authentication data is securely stored and processed by Supabase. Review their Privacy Policy.

PostHog (Analytics)

We use PostHog for product analytics and to understand how users interact with our platform. This helps us improve features and user experience. Review their Privacy Policy.

Anthropic Claude (AI Services)

We use Anthropic's Claude AI for AI-powered features. Your prompts and interactions may be processed by Anthropic's services. Review their Privacy Policy.

GitHub Integration

If you connect your GitHub account, we access repository data with your permission. We only request the minimum permissions necessary for our features.

Data Storage and Security

We implement industry-standard security measures to protect your information:

• Data encryption in transit (HTTPS/TLS) and at rest
• Secure authentication using JWT tokens
• Regular security audits and vulnerability assessments
• Access controls and role-based permissions
• Encrypted database storage with PostgreSQL
• Secure key management and encryption practices

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information, except where we need to retain certain information for legal or legitimate business purposes.

Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us using the information provided below.

Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyze usage patterns and improve our services
• Provide personalized features and content

You can control cookies through your browser settings. Note that disabling certain cookies may limit your ability to use some features of our platform.

Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):

• The right to be informed about our data collection and processing
• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing
• Rights related to automated decision-making and profiling

Our legal basis for processing your data includes: consent, contractual necessity, legal obligations, and legitimate interests. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is collected
• The right to know if personal information is sold or disclosed
• The right to opt-out of the sale of personal information
• The right to access your personal information
• The right to delete personal information
• The right to non-discrimination for exercising your rights

We do not sell your personal information to third parties.