Privacy Policy

1. Who we are

StagePlot Live ("we", "us", "our") is operated by [Launching entity — registered name], registered at [Launching entity — registered address, country]. For privacy questions, contact support@stageplot.live.

2. What we collect

• Account data: email address, sign-in identifiers, optional display name.
• Project content: stage plots, input lists, and other content you create or upload.
• Billing data: we do not store payment cards. Our merchant of record (Lemon Squeezy) processes payments and stores the necessary records on its own infrastructure.
• Operational data: request logs, error reports, anonymized usage statistics via Plausible (no cookies, no cross-site tracking).

3. Why we process it

• To run your account and deliver the service (contractual basis under GDPR Art. 6(1)(b)).
• To bill subscriptions, prevent fraud, and meet tax obligations (legitimate interest / legal obligation).
• To improve the product based on aggregate usage patterns (legitimate interest).

4. Sub-processors

• Supabase — authentication, database, edge functions (Frankfurt / EU region).
• Lemon Squeezy — merchant of record, payment processing, tax remittance.
• Hetzner Cloud — application and marketing site hosting (Falkenstein, Germany).
• Plausible Analytics — privacy-respecting, cookieless aggregate analytics.
• Email host (Google Workspace or Fastmail) — operational and support email.

5. Retention

Account and project data are retained while your account is active and for up to 90 days after account deletion to accommodate undelete requests. Backups are kept for 30 days. Aggregated, non-identifiable analytics may be retained longer.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, port, or object to processing of your data, plus the right to lodge a complaint with your supervisory authority.

• EU / UK (GDPR / UK GDPR): full set above.
• California (CCPA / CPRA): right to know, delete, correct, and opt out of "selling/sharing" — we do not sell or share personal information for cross-context behavioral advertising.
• UAE (PDPL): comparable rights of access, correction, and deletion.

Email support@stageplot.live to exercise any of these rights. We respond within 30 days.

7. International transfers

Where data is transferred outside the European Economic Area or the UK, we rely on standard contractual clauses (SCCs) with our sub-processors and apply appropriate technical safeguards.

8. Cookies

Our marketing site uses no cookies. The application (app.stageplot.live) sets a strictly necessary authentication cookie scoped to .stageplot.live so you stay signed in across page loads.

9. Changes

We will update this page when our practices change and notify existing users by email when changes are material. The "last updated" date at the top of this page reflects the most recent change.