Privacy Policy

This policy explains what we collect and why. We collect the minimum needed to run the service.

What we collect. Account details (email), billing details (handled by Stripe; we store only Stripe identifiers and status, never card numbers), the application details you submit for onboarding, and run evidence produced during a reality pass.

Connection credentials. A read-only database witness connection string you provide is encrypted at rest and used only to read your application database against invariants during a supervised run. It is never written to a plain table or a log.

How we use it. To operate runs, produce evidence, bill you, and support you. We do not sell your data.

Subprocessors. Stripe (payments), Supabase (database and auth), Vercel (hosting), Railway and Fly.io (run infrastructure), Resend (email). Each processes data only to provide its function.

Tenant isolation. Your data is separated by row-level security; a tenant sees only its own workspace.

Retention and deletion. Evidence is retained per your plan. You may request export or deletion of your data by emailing hello@readyforusers.com.

Contact. Privacy questions: hello@readyforusers.com.