Privacy Policy

1. Information We Collect

Account information: When you create an account, we collect your name, email address, and profile photo via Google OAuth or magic link authentication.

Payment information: We use Stripe to process payments. We do not store your credit card details — Stripe handles all payment data securely. We store your Stripe customer ID and subscription status.

Usage data: We track which features you use (fund searches, email reveals, filter usage) to improve the product. We use privacy-friendly analytics that do not use cookies.

2. How We Use Your Information

• To provide and maintain the DryPowder service
• To process your subscription and payments via Stripe
• To send transactional emails (welcome, billing, weekly digest)
• To improve product quality and user experience
• To enforce our Terms of Service

3. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe — for payment processing
• Google — for OAuth authentication
• Plausible Analytics — privacy-friendly, cookie-free analytics

4. Data Security

We use industry-standard security measures including encrypted connections (TLS), row-level security on all database tables, and secure authentication via OAuth 2.0. Passwords are never stored — we use passwordless authentication.

5. Your Rights

You can request to view, export, or delete your account data at any time by replying to any email from DryPowder. Account deletion removes all personal data within 30 days.

6. Cookies

DryPowder does not use tracking cookies. We use Plausible Analytics which is fully cookie-free and GDPR compliant. Authentication tokens are stored in local browser storage.

7. Changes

We may update this policy from time to time. We will notify users of significant changes via email.