Privacy Policy

1. Information we collect

• Account data: email address, authentication identifiers, password hash handled by Supabase, language, plan, credit balances, and account timestamps.
• Content data: brands, logos, selected icons, batches, input rows, titles, descriptions, tags, images, source links, schedules, and rendered pins you provide or create.
• Payment data: Razorpay order/subscription/payment identifiers, plan, amount, status, and transaction timestamps. Razorpay processes payment credentials; TechTreasure does not store full card, UPI, or bank credentials.
• API key data: an optional Gemini API key you manually save. It is stored in your profile and used to make AI requests; never paste secrets into content fields.
• Technical data: IP address, browser/device information, logs, errors, cookies, security events, and redirect click data where needed for operation, fraud prevention, analytics, and accounting.

2. How we use information

• Authenticate users and protect accounts.
• Render pins, store exports, process inputs, and provide dashboard features.
• Apply plan limits, credits, subscriptions, trial eligibility, and refunds.
• Send transactional messages such as confirmation, security, and service notices.
• Detect abuse, fraud, unauthorized access, unsafe destinations, and technical faults.
• Improve reliability and understand aggregate feature usage.
• Meet legal, tax, accounting, dispute-resolution, and enforcement obligations.

3. Service providers and international processing

We use infrastructure and providers including Supabase, Razorpay, Google Gemini when you use AI, hosting/CDN services, image providers, and analytics or advertising providers used by the redirector. They receive only the information needed for their service and may process it in countries different from yours. Review their privacy notices separately.

4. Gemini API keys and AI data

When you enable your own Gemini key, the relevant input is sent to Google Gemini using that key. Do not submit confidential, regulated, or third-party personal information unless you have a lawful basis and understand the provider’s terms. AI output is generated automatically and may be wrong. AI credits are currently coming soon; manual-key AI access is a separate feature state.

5. Storage, retention, and deletion

We retain account, payment, security, and accounting records for as long as needed to provide the service and meet legal obligations. We retain content and rendered pins until you delete them or the account is closed, subject to backups and legal holds. You may request deletion or correction through the support channel published in the application. Deletion may not remove records we must retain for fraud, tax, disputes, or legal compliance.

6. Cookies and similar technology

We use necessary cookies for authentication and secure sessions. The standalone redirector and advertising providers may use their own cookies, scripts, local storage, or similar technologies. Browser controls and provider opt-out tools may limit them, although disabling necessary cookies can prevent login or checkout.

7. Security

We use access controls, row-level security, server-side secrets, HTTPS where provided, and provider security features. No internet service is perfectly secure. You are responsible for protecting your credentials and API keys and for reporting suspected compromise quickly.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export personal information, or withdraw consent where processing is consent-based. Requests may require identity verification and may be limited by law. Contact us through the support address shown in the application.

9. Children and changes

The service is not intended for children who cannot legally agree to these terms. We may update this policy when the service, providers, or law changes. The revised date will appear at the top.