Privacy Policy | Glowcase

1. Introduction

Glowcase ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.

Please read this policy carefully. By using Glowcase, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide, including:

Account Information: Name, email address, and password when you create an account
Profile Information: Any additional information you add to your profile
Payment Information: Billing details processed securely through Stripe (we do not store full card numbers)
User Content: Screenshots, images, and assets you upload to create mockups
Communications: Messages you send to us for support or feedback

2.2 Information Collected Automatically

When you use Glowcase, we automatically collect:

Usage Data: Features used, actions taken, and time spent on the Service
Device Information: Browser type, operating system, and device identifiers
Log Data: IP address, access times, and pages viewed
Cookies: Session cookies for authentication and preferences

2.3 Information from Third Parties

We may receive information from:

Google OAuth: If you sign in with Google, we receive your name, email, and profile picture
Stripe: Payment status and subscription information

3. How We Use Your Information

We use the collected information to:

Provide, maintain, and improve the Service
Process transactions and send related information
Create and manage your account
Send you technical notices, updates, and support messages
Respond to your comments, questions, and requests
Monitor and analyze trends, usage, and activities
Detect, investigate, and prevent fraudulent transactions and abuse
Personalize and improve your experience

4. How We Share Your Information

We may share your information in the following situations:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

Supabase: Database hosting and authentication
Stripe: Payment processing
Vercel/Netlify: Application hosting

4.2 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or to protect rights, privacy, safety, or property.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.4 With Your Consent

We may share information for other purposes with your explicit consent.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit (HTTPS/TLS)
Encryption of sensitive data at rest
Regular security assessments
Access controls and authentication
Secure password hashing

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

Provide the Service and maintain your account
Comply with legal obligations
Resolve disputes and enforce agreements

User content (screenshots and assets) is retained according to your subscription tier. See our Terms & Conditions for specific retention periods.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law.

7. Your Rights and Choices

You have the right to:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate information
Deletion: Request deletion of your personal information
Portability: Request your data in a portable format
Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at support@glowcase.app. We will respond within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies for:

Essential Cookies: Required for authentication and core functionality
Preference Cookies: Remember your settings and preferences
Analytics Cookies: Understand how users interact with the Service

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

9. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

10. Children's Privacy

Glowcase is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending you an email. Your continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@glowcase.app

14. Additional Rights for EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

Right to object to processing based on legitimate interests
Right to restrict processing in certain circumstances
Right to lodge a complaint with a supervisory authority

Our legal basis for processing personal information includes: consent, contract performance, legal obligations, and legitimate interests.

15. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

Know what personal information is collected
Know whether personal information is sold or disclosed
Say no to the sale of personal information (we do not sell personal information)
Access your personal information
Equal service and price, even if you exercise your privacy rights