Cookie Policy

1. Introduction to Cookies

This Cookie Policy explains how our SaaS platform ("we," "us," or "our") uses cookies and similar tracking technologies when you access or use our Service.

Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit websites. They help websites remember information about your visit, making your next visit easier and the site more useful to you.

By using our Service, you consent to the use of cookies in accordance with this Cookie Policy. If you do not agree to our use of cookies, you should adjust your browser settings accordingly or refrain from using our Service.

This Cookie Policy should be read in conjunction with our Privacy Policy and Terms of Service.

2. Types of Cookies We Use

We use several types of cookies for different purposes. Each type serves a specific function to enhance your experience or help us improve our Service.

2.1 Essential Cookies

Essential cookies are necessary for the Service to function properly. These cookies enable core functionality such as security, authentication, and session management. The Service cannot function properly without these cookies.

Examples of essential cookies:

• Session cookies: Maintain your logged-in state across pages
• Authentication tokens: Verify your identity and secure your session
• Security cookies: Detect authentication abuse and protect your account
• CSRF tokens: Prevent cross-site request forgery attacks
• Load balancer cookies: Route requests to the correct server

Essential cookies are strictly necessary and cannot be disabled through our cookie management interface. Blocking these cookies through your browser settings will prevent you from accessing core features of the Service.

2.2 Analytics Cookies

Analytics cookies help us understand how users interact with our Service. We use this information to improve the Service, fix issues, and enhance user experience.

What we track with analytics cookies:

• Pages visited and features used
• Time spent on different sections
• Navigation paths and user flows
• Error messages and technical issues
• Device type, browser, and screen resolution
• Geographic location (country/region level only)

We use analytics cookies to generate aggregated statistics and reports. This data is typically anonymized and does not identify individual users.

You can opt out of analytics cookies through our cookie preference center without affecting your ability to use the Service.

2.3 Marketing Cookies

Marketing cookies track your activity across websites to build a profile of your interests and show you relevant advertising on other platforms.

Marketing cookies may be used for:

• Displaying personalized advertisements
• Measuring advertising campaign effectiveness
• Retargeting users who visited our website
• Social media advertising integration
• Conversion tracking

Marketing cookies may be set by third-party advertising partners. These partners may combine information from our site with data they have collected from other websites.

You can opt out of marketing cookies through our cookie preference center. Opting out will not prevent you from seeing advertisements, but they will be less relevant to your interests.

3. First-Party vs. Third-Party Cookies

3.1 First-Party Cookies

First-party cookies are set directly by our Service and can only be read by us. These cookies are primarily used for essential functionality, analytics, and personalization.

We maintain strict control over first-party cookies and use them in accordance with our Privacy Policy. First-party cookie data is not shared with third parties except as disclosed in our Privacy Policy.

3.2 Third-Party Cookies

Third-party cookies are set by external services integrated into our platform. We use carefully selected third-party providers to deliver specific functionality, analytics, and marketing services.

Third-party services that may set cookies include:

• Supabase: Authentication and database services
• Stripe: Payment processing and fraud prevention
• Vercel: Hosting and analytics infrastructure
• Google Analytics: Website analytics (if enabled)
• Social media platforms: Social login and sharing features
• Advertising networks: Marketing and retargeting (if enabled)

Third-party cookies are subject to the privacy policies of their respective providers. We encourage you to review the privacy policies of these third-party services.

4. Session vs. Persistent Cookies

4.1 Session Cookies

Session cookies are temporary cookies that expire when you close your browser. They are primarily used to maintain your logged-in state and remember your actions during a single browsing session.

Session cookies do not collect information from your device and are automatically deleted when you end your session.

4.2 Persistent Cookies

Persistent cookies remain on your device for a specified period or until you delete them. They are used to remember your preferences, keep you logged in between sessions, and provide a personalized experience.

Common persistent cookies we use:

• Remember me cookies: Keep you logged in (up to 30 days)
• Preference cookies: Store your settings and customizations
• Analytics cookies: Track returning visitors (up to 2 years)
• Marketing cookies: Measure campaign effectiveness (up to 90 days)

The lifespan of persistent cookies varies by purpose. Security-sensitive cookies typically have shorter lifespans, while analytics cookies may persist longer to measure user behavior over time.

5. Third-Party Services and Their Cookies

We integrate several third-party services to provide core functionality and enhance your experience. Each service may set cookies subject to its own privacy policy.

5.1 Supabase (Authentication & Database)

Supabase provides our authentication and database infrastructure. Supabase sets cookies to maintain your authentication state, manage sessions, and secure your account.

Supabase cookies include:

• Authentication tokens and session identifiers
• Refresh tokens for maintaining logged-in state
• Security tokens for API request validation

Learn more: Supabase Privacy Policy

5.2 Stripe (Payment Processing)

Stripe processes payments and manages subscription billing. Stripe uses cookies for fraud prevention, secure payment processing, and compliance with payment card industry standards.

Stripe cookies are used for:

• Fraud detection and prevention
• Secure checkout sessions
• Payment method storage and retrieval
• PCI DSS compliance

Learn more: Stripe Privacy Policy and Stripe Cookie Policy

5.3 Vercel (Hosting & Analytics)

Vercel hosts our infrastructure and provides performance analytics. Vercel may set cookies for edge caching, performance optimization, and basic usage analytics.

Vercel cookies include:

• Edge network routing and load balancing
• Performance monitoring
• A/B testing and experimentation
• Geographic location optimization

Learn more: Vercel Privacy Policy

5.4 Analytics Services

We may use analytics services to understand how users interact with our Service. These services may include Google Analytics, Mixpanel, or similar platforms.

Analytics cookies track page views, user interactions, conversion events, and technical performance metrics. Data is typically aggregated and anonymized.

5.5 Social Media Platforms

If you use social login features (e.g., "Sign in with Google"), the respective social media platform may set cookies on your device. These cookies are governed by the platform's privacy policy.

6. How We Use Cookies

We use cookies for various purposes to provide, secure, and improve our Service:

6.1 Authentication and Security

• Maintain your logged-in state across sessions
• Verify your identity and authenticate API requests
• Prevent unauthorized access and detect suspicious activity
• Protect against cross-site scripting and forgery attacks
• Enforce rate limits and prevent abuse

6.2 Functionality and Personalization

• Remember your preferences and settings
• Store your language and timezone selections
• Maintain your white-label customization choices
• Persist form data and draft content
• Remember your cookie consent preferences

6.3 Performance and Analytics

• Measure Service usage and feature adoption
• Identify and fix technical issues
• Optimize page load times and performance
• Analyze user behavior to improve user experience
• Generate aggregated usage statistics

6.4 Marketing and Advertising

• Display relevant advertisements on external platforms
• Measure the effectiveness of marketing campaigns
• Retarget users who expressed interest in our Service
• Track conversions from advertising sources
• Provide personalized content recommendations

7. Cookie Lifespan and Storage Duration

Different cookies have different lifespans based on their purpose:

We regularly review cookies and remove those that are no longer necessary. Cookies may be renewed on each visit, extending their expiration date.

8. Managing Your Cookie Preferences

You have several options for managing cookies:

8.1 Cookie Preference Center

We provide a cookie preference center where you can control non-essential cookies. You can access this at any time through the "Cookie Settings" link in the footer of our website.

Through the preference center, you can:

• Enable or disable analytics cookies
• Enable or disable marketing cookies
• View detailed information about each cookie category
• Update your preferences at any time

Note: Essential cookies cannot be disabled through the preference center as they are necessary for the Service to function.

8.2 Browser Controls

Most browsers allow you to control cookies through their settings. You can typically:

• View and delete existing cookies
• Block all cookies
• Block third-party cookies only
• Clear cookies when you close your browser
• Set exceptions for specific websites

Common browser cookie settings:

• Chrome: Settings > Privacy and security > Cookies
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Cookies and website data
• Edge: Settings > Cookies and site permissions

Warning: Blocking all cookies will prevent you from logging in and using core features of the Service.

8.3 Third-Party Opt-Out Tools

For advertising cookies, you can use industry opt-out tools:

• Digital Advertising Alliance (DAA) Opt-Out
• European Interactive Digital Advertising Alliance (EDAA)
• Network Advertising Initiative (NAI) Opt-Out

8.4 Mobile Device Controls

Mobile devices offer advertising identifier controls:

• iOS: Settings > Privacy > Tracking > Limit Ad Tracking
• Android: Settings > Google > Ads > Opt out of Ads Personalization

9. Do Not Track (DNT) Signals

Do Not Track (DNT) is a browser setting that signals your preference not to be tracked. However, there is no universal standard for how websites should respond to DNT signals.

9.1 Our DNT Policy

We respect your privacy choices but currently do not respond to DNT signals due to the lack of industry consensus on implementation. Instead, we provide explicit cookie controls through our cookie preference center.

Our approach:

• We provide clear, granular cookie controls
• You can opt out of non-essential cookies at any time
• We honor your explicit cookie preferences
• We minimize data collection to what's necessary

9.2 Alternative Privacy Controls

Instead of relying on DNT, we recommend:

• Using our cookie preference center for explicit control
• Adjusting your browser's cookie settings
• Using privacy-focused browsers or extensions
• Opting out of advertising networks directly

9.3 Future DNT Support

We monitor developments in DNT standards. If a clear, enforceable standard emerges, we will evaluate implementation and update this policy accordingly.

10. Cookies and Data Protection Laws

Our use of cookies complies with applicable data protection laws, including:

10.1 GDPR (European Union)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we comply with the General Data Protection Regulation (GDPR) and ePrivacy Directive.

Under GDPR:

• We obtain consent before placing non-essential cookies
• You can withdraw consent at any time
• We provide clear information about cookie purposes
• You have rights to access and delete cookie data

10.2 CCPA/CPRA (California)

For California residents, our cookie practices comply with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

You have the right to:

• Know what information cookies collect
• Opt out of the "sale" or "sharing" of personal information
• Access and delete cookie data
• Non-discrimination for exercising privacy rights

10.3 Other Jurisdictions

We respect privacy laws in all jurisdictions where we operate. If you have specific questions about compliance in your region, please contact us.

10.4 Children's Privacy

Our Service is not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect information from children through cookies.

11. Changes to This Cookie Policy

We may update this Cookie Policy periodically to reflect changes in our practices, technologies, legal requirements, or business needs.

11.1 Notification of Changes

When we make material changes to this Cookie Policy, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email if you have an account
• Display a notification banner when you next visit the Service
• Re-prompt for cookie consent if legally required

11.2 Review Recommendations

We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11.3 Historical Versions

Previous versions of this Cookie Policy are archived and available upon request. Contact us if you need access to earlier versions.

12. Contact Us About Cookies

If you have questions, concerns, or requests regarding our use of cookies, please contact us:

For general privacy inquiries or to exercise your data protection rights, please refer to our Privacy Policy for additional contact options.

What to include in your inquiry:

• Your name and contact information
• Specific cookies or cookie categories you're asking about
• Details about your concern or request
• Your location (for jurisdiction-specific questions)

We aim to respond to cookie-related inquiries within 30 days. Complex requests may require additional time, in which case we will inform you of the extension.

13. Additional Resources

To learn more about cookies and online privacy:

13.1 Cookie Information

• All About Cookies - Comprehensive cookie information
• Your Online Choices - EU cookie and advertising controls
• ICO Cookie Guidance - UK data protection authority guidance

13.2 Browser Resources

Learn how to manage cookies in your specific browser:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

13.3 Related Policies

For complete information about how we handle your data:

• Privacy Policy: Comprehensive data protection practices
• Terms of Service: Legal agreement governing Service use
• Security Policy: How we protect your data