At Supaframe, your privacy is important to us. This Privacy Policy outlines what information we collect, how we use it, how we store it, and what rights you have regarding your data.

1. What we collect

When you use Supaframe, we collect and store the following information:

• Your name and email address (when you register or log in)

• Your authentication data (via Supabase Auth)

• Components you create (e.g. appointment forms, waitlists)

• Data submitted by your end-users via those components (e.g. booking info, email addresses, form responses)

• Payment and billing information (handled via Polar.sh)

• Website usage data (via Google Analytics)

2. How we use your data

We use your data to:

• Authenticate you and let you log in securely

• Allow you to create and manage Framer code components

• Store submitted form data from your users in your private admin dashboard

• Provide customer support and respond to your requests

• Process payments (through Polar.sh, our Merchant of Record)

• Improve our service via usage analytics (Google Analytics)

We do not share your data with advertisers or third parties.

3. How your users' data is handled

If you embed a Supaframe component on your Framer website (e.g. booking form, poll, waitlist):

• Your visitors may submit personal data (e.g. name, email, message)

• This data is stored securely in Supabase, in your account only

• You, and only you, have access to these submissions through your admin dashboard

• We do not use or access your users’ form data for any other purpose

You are responsible for how you use that data in accordance with GDPR or other applicable laws.

4. Data storage

• All data (your profile, components, submissions) is stored in a secure Supabase database

• We implement access controls and encryption at rest and in transit

• Only authenticated users can access their own data — no one else can see your submissions

• Your data will never be sold, shared, or used without your permission

5. Payments and billing

We use Polar.sh to process payments.

• Polar is our Merchant of Record, which means they handle tax, billing, invoicing, and regulatory compliance

• When you make a payment or subscribe, your billing info is securely stored and processed by Polar

• We do not store or see your payment card or billing data

For more details, please read Polar's privacy policy.

6. Analytics

We use Google Analytics on our public website (e.g. landing pages hosted on Framer) to understand general usage patterns. This data is anonymized and not linked to your personal information.

Analytics is not active inside the logged-in application (hosted on Lovable).

7. Third-party hosting

• Our landing page and marketing content are hosted on Framer

• The Supaframe app itself is hosted on Lovable

• All backend data and authentication is managed via Supabase

8. Your rights

You have the right to:

• Access, update or delete your account data

• Request export of your component submission data

• Withdraw consent at any time

9. Questions?

If you have any questions about this Privacy Policy or how we handle data, feel free to contact us.