Privacy Policy

1. Information We Collect

Account information: When you register, we collect your name, email address, and hashed password.

Billing information: Paid plan purchases are processed by Stripe. We store only a Stripe customer ID and subscription status — we never see or store your full card number.

Content you create: Changelog entries, project names, descriptions, and other content you publish through the Service.

Subscriber emails: Email addresses collected through your public changelog subscribe form. These belong to your subscribers, not to us.

Usage data: Page view counts and aggregate analytics to help you understand how your changelog is being read. We do not use third-party tracking scripts.

2. How We Use Your Information

• To operate and improve the Service
• To send transactional emails (account confirmation, password reset)
• To process payments and manage subscriptions
• To deliver changelog notification emails to your subscribers on your behalf
• To respond to support requests sent to hello@releasefly.com

We do not sell your personal information to third parties.

3. Subscriber Data

Email addresses collected through your changelog's subscribe form are stored on your behalf. Each notification email includes an unsubscribe link. We send emails only in response to you publishing a changelog entry. You can view and delete your subscriber list at any time from the dashboard.

4. Cookies and Tracking

We use a session cookie to keep you signed in. We do not use advertising cookies or third-party analytics trackers. Page view counts are recorded anonymously (no IP addresses are stored).

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your data is removed within 30 days, except where we are required by law to retain it longer. Aggregate analytics data may be retained in anonymized form.

6. Third-Party Services

We use the following sub-processors:

• Stripe — payment processing (governed by Stripe's Privacy Policy)
• Resend — transactional email delivery
• Vercel — hosting and infrastructure
• Neon / Supabase / PostgreSQL — database hosting

7. Security

Passwords are hashed using bcrypt and never stored in plain text. All data is transmitted over HTTPS. We follow industry-standard security practices, but no system is completely immune to security risks. Please use a strong, unique password.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your changelog data

To exercise these rights, email us at hello@releasefly.com.

9. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes by email or by displaying a notice in the dashboard. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at hello@releasefly.com.