Privacy Policy

We hold your email address, what you bought, and the seats attached to it. We do not sell anything to anybody, we do not run advertising, and we do not track you around the internet.

• Your account. Email address, and a display name and avatar if you set one.
• Your purchase. Which plan, how many seats, the amount and currency, and the identifiers Stripe gives us for the payment so we can match it to your account.
• Your seats. The codes on your license, the email address each was sent to, and when each was invited and redeemed.

We do not store card numbers. Stripe handles payment details and we never receive them.

Signing in sends a link to your email address rather than asking for a password, so there is no password for us to store or for anybody to steal. The link is single use and expires. Your session is held in a cookie that exists to keep you signed in and does nothing else.

• Supabase stores the accounts and the license records, and runs the sign-in.
• Stripe takes payments and holds the card details we never see.
• Resend sends the sign-in links and the seat invitations.
• Cloudflare serves the site and, in the ordinary way of a web host, sees the requests that reach it.

Each holds only what it needs to do that job. None of them is given your data for their own purposes, and we have no other recipients.

Two are necessary and are always set: the one that keeps you signed in, and the one that remembers whether you chose the light or dark theme. Neither can be turned off without breaking the thing it does.

One is optional, and nothing is loaded for it until you say yes. It measures which of our own pages people arrive from, so we know whether writing them was worth it. There are no advertising profiles and no cross-site tracking, and we do not sell or share what it collects. Choosing “Only essential” loads nothing at all; changing your mind later takes effect the next time the page loads, because a script that has already run cannot be unrun.

Your account and license for as long as the license exists, because a permanent license is not much use if we forget you own it. Delete your account and we remove the profile and the seats. Records of the payment itself are kept as long as tax and accounting law requires, which is out of our hands.

A copy of what we hold, a correction to any of it, or its deletion. Email us and we will do it. If you are in the UK or the EU you have these rights under the GDPR, and you may complain to your data protection authority if you think we have handled something badly.

If what we collect changes, this page changes with it, and the date at the top moves.

Anything about your data goes to support@kobra.systems.