Privacy Policy

Information we collect

• Account information. If you sign up with email and password, we store your name, email address, and a securely hashed password (we never store your password in plain text). If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Uploaded files. The PDF (and other) files you upload to edit, sign, merge, split, or convert are stored so you can access and continue working on them. Files are stored using an S3-compatible object storage provider (Supabase Storage).
• Account and usage data. Document metadata (titles, page counts, edit history, timestamps) is stored in our database (PostgreSQL, via Prisma) so your dashboard and documents work correctly.
• Cookies and session data. We use a session cookie (via NextAuth.js) to keep you signed in. We do not use third-party advertising or tracking cookies beyond what's described here.

How we use your information

We use the information above only to:

• Provide, maintain, and secure the editing, signing, and conversion tools
• Authenticate you and keep your account and documents secure
• Respond to support requests sent to us
• Improve the Service and diagnose technical issues

We do not sell your personal information or your uploaded files.

Who we share data with

We share data only with the service providers that make the Service work:

• Google — if you choose to sign in with Google (OAuth authentication only).
• Supabase — hosts our database and object storage, where your account data and uploaded files are stored.
• Vercel — hosts and serves the application.

These providers process data only as needed to deliver the Service and are bound by their own privacy and security obligations. We do not share your files or account data with advertisers.

Data retention and deletion

We retain your account information and uploaded files for as long as your account is active, so you can return to your documents. You may request deletion of your account and all associated files at any time by emailing info@reactcodelabs.com. We will delete your data within a reasonable time after verifying the request.

Security

We use industry-standard measures to protect your data, including hashed passwords, encrypted connections (HTTPS/TLS), and access-controlled storage. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children's privacy

The Service is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact us

Questions about this policy or your data? Email us at info@reactcodelabs.com.