Organyz

Privacy Policy

Last updated: March 20, 2026

1. Overview

Organyz ("we", "us", "our") respects your privacy. This policy explains what data we collect, why, and how we handle it. We collect the minimum data necessary to provide the Service and we never sell your information.

2. Data We Collect

Account information

When you sign up, we store your email address and, if you authenticate via Google OAuth, your name and profile picture as provided by Google. This is used solely for authentication and displaying your profile within the app.

User content

Domains, items, relationships, saved views, and preferences you create within the app. This data is yours — we store it only to provide the Service.

Billing data

If you subscribe to Pro, payment is processed by Stripe. We do not store your credit card number. We receive your Stripe customer ID and subscription status to manage your plan.

3. Data We Do NOT Collect

  • No analytics or tracking cookies. We do not use Google Analytics, Mixpanel, Amplitude, or any third-party analytics service.
  • No AI processing. Your data is never sent to any AI or machine learning service. Insights are generated by deterministic scoring rules that run entirely in your browser.
  • No advertising data. We do not serve ads and do not share data with advertisers.

4. How We Store Your Data

Your data is stored in a Supabase-hosted PostgreSQL database with Row Level Security (RLS) enabled. RLS ensures that each user can only access their own data at the database level — even if application code had a bug, the database itself enforces isolation.

All connections to our infrastructure use TLS encryption in transit. Data at rest is encrypted by Supabase's underlying infrastructure.

5. Third-Party Services

We use the following third-party services:

  • Supabase — database hosting and authentication
  • Stripe — payment processing for Pro subscriptions
  • Google Fonts — font delivery (Inter, Space Grotesk, JetBrains Mono). Google may log font requests per their privacy policy.
  • Vercel — application hosting

We do not share your user content with any of these services beyond what is required to operate the Service.

6. Cookies

We use only essential cookies required for authentication (Supabase session tokens). We do not use marketing, analytics, or tracking cookies.

7. Your Rights

You can, at any time:

  • Export all your data as JSON from Settings
  • Delete your account and all associated data permanently from Settings
  • Update your profile information from Settings

If you are in the EU/EEA, you have additional rights under the GDPR including the right to access, rectification, portability, and erasure. Contact us to exercise these rights.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, all data is permanently removed from our systems. We do not keep backups of deleted accounts.

9. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have, we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via the Service or email. The "Last updated" date at the top reflects the most recent revision.

11. Contact

Questions or concerns about your privacy? Contact us at organyzio@gmail.com.