Privacy Policy

1. Introduction

RedditGrow ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at redditgrow.com (the "Service").

By accessing or using RedditGrow, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

We collect the following categories of information to provide and improve the Service:

Account Data

• Name and email address provided at registration
• Password (stored as a cryptographic hash, we never store plain-text passwords)
• Account preferences, plan tier, and billing information

Reddit OAuth Tokens

• When you connect your Reddit account, we store OAuth access and refresh tokens issued by Reddit. These tokens are used exclusively to post on your behalf and to read subreddit data you have authorised.
• We never store your Reddit password.
• You can revoke access at any time from your Reddit account settings or from within RedditGrow.

Usage Data

• Product URLs and landing page content you submit for AI analysis
• Subreddits you track, opportunities you review, and responses you approve or dismiss
• Feature usage patterns, click events, and session metadata
• IP address, browser type, and operating system (collected automatically)

Payment Information

• All payment processing is handled by Stripe. We do not store full credit card numbers or CVV codes on our servers. We retain only the last four digits of your card and your Stripe customer ID for billing management.

3. How We Use Your Information

• To create and maintain your account and authenticate your sessions
• To provide the core Service: opportunity detection, AI response generation, and Reddit posting on your behalf
• To process payments and manage your subscription
• To send transactional emails (welcome, billing receipts, trial reminders)
• To monitor service health, diagnose errors, and prevent abuse
• To improve the platform through aggregated, anonymised analytics
• To comply with legal obligations and enforce our Terms of Service

4. Data Sharing

We do not sell, rent, or trade your personal data. We share information only with the third-party service providers necessary to operate the Service:

• Stripe: payment processing and subscription management
• Supabase: database hosting and authentication (data is stored in Supabase-managed PostgreSQL)
• OpenAI: AI analysis and response generation (your product URL content and subreddit context are sent to OpenAI for processing)
• Reddit: your connected account's OAuth tokens are used to interact with the Reddit API on your behalf
• Vercel: application hosting and serverless function execution
• Resend: transactional email delivery

We may also disclose information if required by law or to protect the rights, property, or safety of RedditGrow, our users, or the public.

5. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit using TLS/HTTPS
• Row-Level Security (RLS) on all database tables so users can only access their own data
• OAuth token storage with restricted database permissions
• Regular dependency audits and security patches

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your account and associated personal data
• Export: request a machine-readable export of your data
• Objection: object to certain processing activities

To exercise any of these rights, contact us at support@redditgrow.com. We will respond within 30 days.

7. Cookies

RedditGrow uses cookies and similar technologies solely for:

• Authentication: session cookies managed by Supabase Auth to keep you logged in
• Preferences: storing your theme (light/dark) selection

We do not use tracking cookies or third-party advertising cookies. You can disable cookies in your browser settings, though this may impair your ability to use the Service.

8. Third-Party Services

Our Service integrates with the following third parties, each governed by their own privacy policies:

• Supabase: supabase.com/privacy
• Stripe: stripe.com/privacy
• OpenAI: openai.com/policies/privacy-policy
• Reddit API: reddit.com/policies/privacy-policy
• Vercel: vercel.com/legal/privacy-policy

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account:

• Personal data and account information are deleted within 30 days
• Reddit OAuth tokens are revoked and deleted immediately
• Anonymised usage data may be retained for up to 24 months for aggregate analytics purposes
• Billing records may be retained for up to 7 years as required by applicable tax and financial regulations

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify you by email or via an in-app notice. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.