Privacy Policy

We collect the following categories of information:

• Account information. When you sign in, our authentication provider (Clerk) processes your name, email address, and — if you choose Google sign-in — the basic profile details that Google shares. We store a display name and a plan identifier.
• Annotations & collaboration data. Comments, annotation pins, review status, and the page URL they are attached to are saved so you can review and share them. When you open a collaboration link, presence and cursor data are exchanged in real time with others in that session.
• Subscription & billing information. Paid plans are processed by Kelviq, our Merchant of Record. Kelviq handles your payment details directly — we never receive or store full card numbers. We receive your plan, billing cycle, and subscription status.
• Local data. Your annotations, session identifiers, and usage limits are cached in your browser’s local storage so the tool works without an account and survives page reloads.
• Technical data. Standard information such as browser type and interactions needed to operate and secure the Service.

We use the information we collect to:

• Provide, maintain, and improve the Service;
• Authenticate you and keep your account secure;
• Store and sync your annotations and collaboration sessions;
• Process subscriptions and enforce plan limits;
• Respond to your requests and provide support;
• Detect, prevent, and address abuse or technical issues.

We rely on the following processors, each of whom handles data on our behalf under their own privacy terms:

• Clerk — authentication and account management.
• Supabase — database and real-time collaboration for annotations and sessions.
• Kelviq — subscription billing as Merchant of Record, including payment processing and tax.
• Google Fonts — optional web fonts loaded on demand when you use the font tools.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

The Service uses cookies and browser local storage to keep you signed in, remember your preferences, cache your annotations, and enforce usage limits. You can clear this data through your browser at any time, though doing so will sign you out and remove locally cached annotations.

We keep account information for as long as your account is active. Collaboration sessions expire and are automatically deleted after three days; annotations attached to a page persist until you delete them or request deletion of your account. Billing records are retained by our Merchant of Record as required for tax and accounting purposes.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. You can also delete individual annotations directly in the app.

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service.

If you have questions about this Privacy Policy or your data, contact us at hello@trysparrowcss.com.