1. Introduction

SPMGenerator.com ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name (optional)
• Email address
• Password (stored as a secure hash, never in plain text)
• Authentication provider (if using Google or Apple sign-in)

2.2 Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number. Stripe may collect and store payment details in accordance with their own privacy policy. We store:

• Stripe customer ID (for managing your purchases)
• Purchase history (order amounts, dates, product types)
• License keys issued to your account

2.3 Usage Data

We may collect non-personally identifiable usage data, including:

• Browser type and version
• Device type
• Pages visited and features used
• IP address (for security and rate limiting)
• Timestamps of interactions

2.4 Uploaded Files

Spreadsheet files you upload are processed in memory to generate your output. We do not permanently store your uploaded spreadsheet files on our servers. Generated output files are made available for download and are not retained after your session ends.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Process payments and deliver purchased products
• Send transactional emails (receipts, account verification, security alerts)
• Improve the Service and user experience
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information to third parties.

4. Third-Party Services

We use the following third-party services that may process your data:

Each third-party service operates under its own privacy policy.

5. Data Storage and Security

Your data is stored in a secure PostgreSQL database. We use industry-standard security measures including:

• Encrypted passwords (bcrypt hashing)
• HTTPS encryption for all data in transit
• JWT-based authentication with token rotation
• Rate limiting to prevent abuse

While we take reasonable steps to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information in your profile
• Deletion: Request deletion of your account and associated data
• Data Export: Request an export of your data in a portable format
• Opt-Out: Unsubscribe from non-essential communications

To exercise any of these rights, contact us at support@spmgenerator.com.

7. Cookies

The Service uses essential cookies and local storage to maintain your session and authentication state. We do not use third-party tracking cookies or advertising cookies.

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top of this page and notify you via email or an in-app notice if the changes are significant. Your continued use of the Service after changes constitutes acceptance.

10. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at support@spmgenerator.com.