1. Introduction

SQUAREGLASS operates Squareglass, a digital asset management platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service at squareglass.io. We are committed to protecting your privacy and handling your data responsibly and transparently.

2. Information We Collect

Information you provide directly:

• Name and email address when you create an account
• Payment information (processed by Stripe; we do not store card details)
• Files, videos, images, and other content you upload to the Service

Information collected automatically:

• Log data including IP address, browser type, pages visited, and timestamps
• Usage data such as features accessed and actions performed within the Service
• Device information including operating system and browser version

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Process payments and manage your subscription
• Send transactional emails such as receipts, password resets, and account notices
• Respond to support requests
• Improve and develop the Service
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your information for advertising purposes.

4. Your Content and AI Processing

Files and assets you upload to Squareglass are stored securely on Cloudflare R2 in a private bucket. All files are served through authenticated, time-limited signed URLs. Your content is not accessible to other users. We use AI services to generate tags and perform face recognition on your uploaded assets to provide the Service's core functionality. We will never use your uploaded content to train any AI or machine learning models. We will not access your uploaded content except for legitimate technical support purposes or as required by applicable law.

5. Third-Party Service Providers

We share data with the following third parties solely to operate the Service:

• Stripe: payment processing (stripe.com/privacy)
• Cloudflare: file storage via R2 (cloudflare.com/privacypolicy)
• Supabase: authentication and database (supabase.com/privacy)
• OpenAI: AI-powered asset tagging (openai.com/privacy)
• AWS Rekognition: facial recognition processing (aws.amazon.com/privacy)

These providers act as data processors and are contractually required to protect your data. We do not share your data with any other third parties without your consent, except as required by law.

Google User Data

If you choose to connect your Google Drive account, Squareglass accesses only the specific files you select via Google's file picker to import them into your Squareglass library. We do not access, scan, or store any other files in your Google Drive. Squareglass's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not allow humans to read this data except as necessary for security, legal compliance, or with your explicit consent for support purposes.

6. Data Retention

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Private R2 bucket with no public access
• Authenticated signed URLs with time-limited expiry for all file access
• Row-level security on all database tables
• Encrypted connections (HTTPS/TLS) for all data transmission
• Authentication managed through Supabase with industry-standard security practices

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using industry best practices.

8. International Data Transfers

Your data may be processed and stored in data centers located outside Australia, including in the United States, as our infrastructure providers operate globally. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place through our agreements with these providers.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data
• Portability: request your data in a portable format
• Objection: object to certain types of processing

For Australian users: Your privacy rights are protected under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

For UK and EU users: You have additional rights under the UK GDPR and EU GDPR respectively.

For US users: We comply with applicable US state privacy laws including the CCPA where applicable.

To exercise any of these rights, contact legal@squareglass.io. We will respond within 30 days.

10. Cookies

Squareglass uses essential cookies and session tokens necessary for authentication and to maintain your logged-in state. We do not use advertising or tracking cookies. We do not use third-party analytics cookies.

11. Children's Privacy

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 14 days before they take effect. The date at the top of this policy indicates when it was last updated.

13. Contact Us