1. Information We Collect

We collect information you provide directly to us when you use FeedbackHome:

Account Information

• Direct Registration: Email address, name, and password (securely hashed)
• Google Sign-In: We collect your Google email address and profile name to create your account and personalize your experience. We may also receive your profile picture if you have one set on your Google account.

Organization Information

• Organization name and URL identifier (slug)
• Organization logo (if you choose to upload one)

Content You Submit

Feedback, comments, images, votes, and any other information you choose to provide through our platform.

Waitlist Information

• Email address
• Website URL (optional)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve FeedbackHome
• Create and manage your account
• Process and display your feedback submissions
• Send you technical notices and support messages
• Communicate with you about products, services, and updates
• Respond to your comments and questions

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With your organization: Other members of your organization can see your name and contributions
• Public feedback: Feedback marked as public is visible to anyone who visits your organization's public page
• Legal requirements: When required by applicable law, regulation, or legal process

Third-Party Service Providers

We engage trusted third-party service providers ("data processors") to assist in delivering and improving our Service. These providers are contractually obligated to process your data only on our behalf and in accordance with our instructions. Our service providers include:

• Vercel Inc.: Frontend application hosting and content delivery. Vercel may process technical data such as IP addresses and request logs to deliver our application.
• Render Services, Inc.: Backend infrastructure and API hosting. Render processes and stores application data on secure servers.
• Supabase, Inc.: Database hosting and backend services. Supabase stores and manages your account information and application data.
• Google LLC: OAuth authentication services. When you choose to sign in with Google, Google processes your authentication request and shares your basic profile information (email, name, profile picture) with us as authorized by you.

Each of these providers maintains their own privacy policies and security practices. We encourage you to review their respective privacy policies for more information about how they handle data.

Google User Data

FeedbackHome's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

We do not sell or share Google user data with third-party tools or advertising platforms. Your Google data is used solely to authenticate your identity and create your account within FeedbackHome.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete your personal information within 30 days, except where we are required to retain it by law.

5. Your Rights

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate information
• Deletion: Request that we delete your personal information
• Portability: Request a copy of your data in a portable format
• Withdraw consent: Withdraw consent for data processing where applicable

To exercise any of these rights, please contact us at support@feedbackhome.com.

6. Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted data transmission (HTTPS)
• Secure password hashing
• JWT-based authentication
• Regular security reviews

7. Cookies & Local Storage

We use cookies and browser local storage to provide essential functionality:

Cookies

• Authentication cookie (access_token): A secure cookie that keeps you signed in. This cookie expires after 7 days and is set with SameSite=Lax for security. It is automatically sent with requests to our server to verify your identity.

Local Storage

• User information: Your name and email for display purposes
• Organization data: Your organization list and currently selected organization
• Theme preference: Your light/dark mode preference

These are essential for the service to function and cannot be disabled while using FeedbackHome. No tracking or advertising cookies are used.

8. Children's Privacy

FeedbackHome is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

support@feedbackhome.com