Privacy Policy

[COMPANY-LEGAL-NAME] [COMPANY-LEGAL-FORM]

[COMPANY-ADDRESS-STREET-AND-NUMBER]
[COMPANY-ADDRESS-POSTAL-CODE-CITY-COUNTRY]

Email: [COMPANY-CONTACT-EMAIL]

[DPO-NAME-OR-CONFIRM-NOT-LEGALLY-REQUIRED]

[DPO-CONTACT-OR-N-A]

Account data. When you create a Rebrained Account, Supabase Auth stores your email address and a cryptographic hash of your password — we never store or see your password in plain text. If Google sign-in is enabled on this deployment, basic profile information from your Google account (email, name) is processed the same way.

Workspace data. Your workspace name and, for each team member, their email address and role within the workspace.

Billing data. If billing is configured on this deployment, upgrading to a paid plan is handled entirely by Stripe — your card details are entered directly into Stripe's own Checkout and Billing Portal and never pass through or touch our servers. We store only the resulting Stripe customer reference and subscription status (plan, active/canceled, renewal date) needed to grant product access.

No analytics, no tracking. This deployment runs no analytics, advertising, or behavioral tracking of any kind — no third-party scripts, pixels, or tracking cookies are loaded. We do not sell personal data to third parties.

We use a single session cookie, set by Supabase Auth, to keep you signed in. In production it is scoped to .rebrained.app so that signing in once works across every Rebrained Stack product you're licensed for; in local development it is scoped only to your own machine. This cookie is strictly necessary for the service to function and carries no advertising or tracking purpose.

All account and workspace data is stored in Supabase, hosted in the EU (eu-central-1 / Frankfurt region).

Under the GDPR, you have the right to access, rectify, or erase your personal data; to restrict or object to its processing; to data portability; and, where processing is based on consent, to withdraw that consent at any time. You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, contact us at [COMPANY-CONTACT-EMAIL].

We may update this policy as the product changes. Material changes will be reflected here with an updated effective date once this page is out of draft.