Privacy Policy

We collect information you provide directly to us: your name, email address, company, and anything you send us when you contact support. We collect usage data automatically when you use the product, including IP address, browser type, and pages visited. Payments are processed by Stripe; we receive billing status and invoice details but never see or store full card numbers. When you connect a third-party service to Supercurve, we collect the data described in the next section. We do not sell your personal data.

Supercurve accesses third-party services only when you explicitly authorize them: Google Analytics 4 (reporting data, read only), Google Search Console (search performance data, plus sitemap submission when you request it), Google Ads (reporting and campaign configuration, read only), Google Tag Manager (container configuration, read only), LinkedIn (posts and their performance; publishing only when you enable it), and Webflow (site content). We request the narrowest OAuth scopes each feature needs, read-only wherever possible. Access tokens are stored server-side, encrypted at rest, and are never exposed to your browser. Supercurve's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data from connected services is used for one purpose: showing you your own dashboards, reports, and recommendations inside Supercurve. Our AI features process this data to generate analysis and suggestions for you; we do not use your data, including Google user data, to train generalized AI or machine learning models. We do not sell connected-service data, use it for advertising, or share it with third parties except the service providers described below. Account and usage data is additionally used to operate the service, communicate with you, prevent abuse and fraud, and comply with legal obligations.

We share data only with the service providers that run Supercurve: cloud infrastructure and database hosting (Supabase, Vercel, Google Cloud), payment processing (Stripe), and AI model providers that process data solely to deliver product features. These providers act on our instructions, access only what is necessary, and may not use your data for their own purposes. If you install our Slack app, the messages you exchange with it are processed to provide that feature. We maintain a current list of sub-processors and will notify you of material changes. We disclose data where required by law.

We retain your data for as long as your account is active. Disconnecting an integration immediately stops collection from that service and deletes the stored credentials; you can also revoke Supercurve's access at any time from the provider's own settings (for Google, at myaccount.google.com/connections). You can request deletion of previously collected data or your entire account by contacting privacy@supercurve.ai; we act on verified requests within 30 days, subject to legal obligations that may require us to retain certain records.

Depending on your jurisdiction, you may have rights including: access to the personal data we hold about you; correction of inaccurate data; deletion of your data; restriction of processing; data portability; and objection to processing based on legitimate interests. To exercise any of these rights, contact us at privacy@supercurve.ai. We will respond to requests within 30 days. We will not discriminate against you for exercising your privacy rights.

We use cookies and similar technologies to operate our website, remember your preferences, and understand how visitors use our site. Essential cookies are required for the site to function and cannot be disabled. Analytics cookies help us understand traffic patterns; these can be disabled without affecting functionality. We do not use third-party advertising cookies on our website. You can manage cookie preferences through your browser settings.

We protect your data with encryption in transit and at rest, least-privilege access controls, and continuous vulnerability scanning; the full picture is on our security page at supercurve.ai/security. No method of transmission or storage is 100% secure. In the event of a breach affecting your data, we will notify you in accordance with applicable law.

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact our privacy team at privacy@supercurve.ai. For EU/UK residents, if you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority. Our registered address and Data Protection Officer contact are available upon request.