Privacy Policy

1. What We Collect

When you sign in with Google, we receive:

• Your Google email address
• Your display name and profile photo (if provided by Google)
• A unique identifier (UID) assigned by Firebase Authentication

We store this information in Google Firebase Firestore along with your account status (plan type, approval status, and account creation date).

We do not collect payment card information directly. When subscriptions are enabled, payments are processed by Stripe, which has its own privacy policy.

2. How We Use It

• To authenticate you and control access to the Service
• To send account-related emails (access approval, billing)
• To enforce access tiers and prevent abuse
• To improve the Service

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services that may process your data:

• Google Firebase — authentication and database. Governed by Firebase Privacy Policy.
• Google Sign-In (OAuth) — we receive only the profile data you authorize.
• Stripe (when billing is active) — payment processing. Governed by Stripe Privacy Policy.

4. Local Storage and Cookies

We use your browser's local storage to cache application state, watchlist preferences, scanner settings, and daily Firestore quota counters. This data stays on your device and is not transmitted to us.

We do not use advertising cookies or third-party tracking pixels.

5. Data Retention

Your account data is retained for as long as your account is active. You may request deletion of your account and associated data by emailing us. We will process deletion requests within 30 days.

6. Security

We use industry-standard security practices including encrypted connections (HTTPS), Firebase security rules restricting data access, and HashiCorp Vault for credential management. No method of transmission or storage is 100% secure.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Withdraw consent at any time by discontinuing use of the Service

To exercise these rights, email hello@thinktickle.com.

8. Children

The Service is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes by email. Continued use after changes constitutes acceptance.

10. Contact

Privacy questions: hello@thinktickle.com