Privacy Policy

MatchFlow3D ("we," "us," or "MatchFlow3D") operates the website at matchflow3d.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the rights you have over it.

1. Information We Collect

We collect only the information needed to operate the Service:

• Account information: When you sign up, we collect your email address and a password. The password is stored as a salted hash by our authentication provider; we never see or store the plaintext password.
• Stage data: If you save stage layouts to the cloud (a premium feature), we store your stage designs (dimensions, prop positions, notes, etc.) associated with your account.
• Payment information: If you purchase a premium upgrade, payment is processed by Stripe. We do not see, store, or have access to your full credit card number. Stripe shares with us only a transaction confirmation and your account identifier.
• Usage information: Standard server logs (IP address, browser type, request timestamps) may be collected automatically by our hosting provider for security and reliability purposes.

2. How We Use Your Information

We use the information we collect to:

• Authenticate your account and provide access to features you have purchased.
• Save and retrieve your stage designs.
• Process payments and grant premium status.
• Respond to your questions or support requests.
• Detect and prevent abuse of the Service.

We do not sell your personal information. We do not share your information with advertisers. We do not use your stage data to train machine learning models.

3. Service Providers

We rely on third-party services to operate the Service. These providers process data on our behalf under their own privacy policies:

• Supabase — authentication and database hosting. supabase.com/privacy
• Stripe — payment processing. stripe.com/privacy
• Vercel — website hosting and serverless functions. vercel.com/legal/privacy-policy

4. Cookies and Local Storage

The Service uses your browser's local storage to remember your preferences (such as snap-to-grid setting) and to cache stage data. It uses session cookies issued by Supabase to keep you signed in. We do not use third-party advertising or tracking cookies.

5. Data Retention

We retain account information and saved stages for as long as your account is active. If you delete your account, we will delete your associated stage data within 30 days. Payment records are retained as required by tax and accounting regulations.

6. Your Rights

You may request to access, correct, or delete your personal information at any time by emailing us at dylan@matchflow3d.com. If you are in the European Economic Area, the United Kingdom, or California, you may have additional rights under applicable law (including the right to data portability and the right to object to processing).

7. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Security

We use reasonable technical and organizational measures to protect your information, including HTTPS encryption in transit and access controls on stored data. No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Effective date" above and, where appropriate, notify you by email or through the Service.

10. Contact Us

If you have questions about this Privacy Policy or your information, contact us at dylan@matchflow3d.com.