Privacy Policy

1. Who controls your data

FeedbackQueue, the operator of feedbackqueue.dev, is responsible for the personal data described in this policy. Contact us at support@feedbackqueue.dev.

2. Information we collect

• Account details such as name, email, avatar, authentication provider, and profile information.
• Projects, reviews, comments, support messages, moderation records, and other content you submit.
• Credit, subscription, invoice, and Stripe customer identifiers. Stripe processes card details; we do not store full card numbers.
• Security and operations data such as IP address, timestamps, browser or device details in server logs, and abuse-prevention records.
• Campaign and product-usage data only after you allow optional analytics.

3. How and why we use it

• Provide accounts, projects, reviews, credits, payments, support, and transactional messages under our contract with you.
• Protect the service, enforce our terms, investigate abuse, and keep reliable records for our legitimate interests and legal obligations.
• Understand and improve the service through optional analytics when you give consent.
• Send marketing messages where permitted; you can unsubscribe at any time.

4. Service providers and disclosures

We disclose data only as needed to operate the service, comply with law, or complete a business transaction. Providers may include:

• Railway, Supabase, and PostgreSQL providers for hosting and databases.
• Stripe for payments and subscriptions.
• Google and GitHub when you use their sign-in services.
• Namecheap email, SMTP providers, and Resend for email delivery.
• Cloudflare Turnstile and Upstash for abuse prevention and rate limiting.
• Sentry for error monitoring. Session replay is disabled.
• OpenRouter and its selected model providers when review content is processed for AI-assisted quality checks.
• Google Analytics, Microsoft Clarity, and PostHog only after you allow optional analytics.

We do not sell personal data for money or use it for cross-context behavioural advertising.

5. Cookies and local storage

Essential cookies and storage support authentication, security, preferences, and core features. Optional analytics do not load until you select “Allow analytics.” You can withdraw consent at any time using “Privacy choices” in the site footer.

6. Public content

Project names, descriptions, links, screenshots, aggregate counts, and published testimonials may be visible publicly. Account email addresses, private review text, access tokens, test credentials, webhook URLs, and internal moderation records are not intended to be public. Do not place secrets or personal data in fields intended for public display.

7. Retention

We retain account and service records while your account is active and as reasonably needed to provide the service, resolve disputes, prevent fraud, and meet legal or accounting obligations. Deleted data may remain in restricted backups until those backups expire. Retention periods vary by record type and legal requirement.

8. International transfers and security

Providers may process data in the United States and other countries. Where required, we use contractual or other recognised transfer safeguards. We use TLS, access controls, hashed passwords where applicable, and restricted administrative access. No system can guarantee absolute security.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your data, and to withdraw consent. You may also complain to your local data-protection authority. Email us to make a request; we may need to verify your identity before responding.

10. Change of ownership

If FeedbackQueue is sold, merged, reorganised, or transfers its assets, personal data may transfer to the successor as part of that transaction. The successor must handle the data consistently with applicable law and the commitments in effect at the time of transfer. We will provide notice of material changes where required.

11. Children

The service is not directed to children under 13, and we do not knowingly collect their personal data.

12. Policy changes

We may update this policy. We will post the revised date and give additional notice of material changes when required.