Privacy Policy

This Privacy Policy explains how Deikora collects, uses, stores, shares, and protects your personal data when you use our website, applications, and services.

For the purposes of applicable data protection laws, Deikora is the data controller. You can contact us at support@deikora.com for any privacy-related questions or requests.

Account information: email address, display name, password hash (managed by Supabase Auth), avatar, banner image, and authentication method.

Page and profile information: your chosen page slug, page title, bio, theme configuration, links, items, social links, custom domain, contact form settings, and any images or content you upload.

Usage and device information: IP address, browser type and version, device type, operating system, referral URLs, pages visited, interactions with your public page, and diagnostic logs.

Communications: emails or messages you send to our support team, transactional emails we send you, and responses you provide through surveys or feedback forms.

Payment information: billing status, subscription plan, invoice history, and payment processor identifiers. We do not store full credit card details; those are handled by LemonSqueezy.

OAuth and integration data: when you connect via Google, Steam, or other supported providers, we receive the profile information you authorize, such as your name, avatar, and provider identifier.

To provide, operate, and maintain Deikora, including account creation, authentication, and rendering your public page.

To process payments, manage subscriptions, and communicate billing-related information through LemonSqueezy.

To send transactional emails such as account confirmations, password resets, security alerts, and plan changes via Resend.

To analyze usage, diagnose technical issues, improve performance, and develop new features.

To detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service.

To comply with legal obligations and respond to lawful requests from public authorities.

We process personal data only where we have a valid legal basis under applicable law, including:

Performance of a contract: processing necessary to provide Deikora under our Terms of Service.

Legitimate interests: ensuring security, preventing fraud, improving our services, and communicating with users, provided those interests are not overridden by your rights.

Consent: where you have given explicit consent, for example for optional analytics or marketing communications.

Legal obligation: processing required to comply with applicable laws, tax, or regulatory requirements.

We use essential cookies and similar technologies to maintain your session, keep you signed in, remember your theme preferences, and protect the security of the service.

We may use analytics and performance cookies to understand how users interact with Deikora. You can manage or disable non-essential cookies through your browser settings.

By using Deikora with your browser set to accept cookies, you consent to our use of essential cookies. Continued use of the service is not possible without essential cookies.

We rely on trusted third-party providers to host, secure, and operate Deikora. These include Supabase for authentication and database services, Vercel for hosting, Cloudflare for content delivery and security, LemonSqueezy for billing, Resend for transactional emails, and Google or Steam for OAuth authentication.

Each third-party provider has its own privacy policy and terms of service. We are not responsible for their data practices, but we choose providers that maintain strong privacy and security standards.

Processors act only on our instructions and under appropriate contractual safeguards. We do not sell your personal data to any third party.

Payments for Deikora subscriptions are processed by LemonSqueezy. When you subscribe, you provide payment information directly to LemonSqueezy, not to Deikora.

We receive and store your subscription status, selected plan, invoice history, and payment processor identifiers so we can manage your account and enforce plan features. We do not store full credit card numbers or bank account details.

We do not sell, rent, or trade your personal data.

We share data only with service providers and processors under contract who help us operate Deikora, when required by law or to protect our legal rights, or in connection with a business transfer such as a merger or acquisition.

Public pages and content you publish are visible to anyone who visits your slug URL. Do not include sensitive personal information in public content unless you intend to share it.

We keep your account information and page content for as long as your account is active. If you delete your account, we will remove or anonymize your personal data within a reasonable period, generally within 30 days, except where retention is required by law or for legitimate business needs.

Server logs, security logs, and analytics data are retained for up to 90 days unless longer retention is necessary for security investigations or legal compliance.

Backup copies may be retained for a limited period after deletion to allow recovery from accidental loss, after which they are securely deleted.

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, row-level security in our database, regular security reviews, and secure development practices.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

Depending on your location, you may have the right to access, correct, update, delete, restrict, or object to the processing of your personal data, as well as the right to data portability and the right to withdraw consent where applicable.

To exercise these rights, contact us at support@deikora.com. We will respond within the timeframes required by applicable law.

If you are located in the European Union, you also have the right to lodge a complaint with your local data protection supervisory authority.

Your data may be transferred to and processed in countries other than your country of residence, including the United States and countries within the European Economic Area, where our service providers operate data centers.

When we transfer personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or other legally recognized transfer mechanisms to protect your data.

Deikora is not intended for children under 13 years of age, or the minimum age required by law in your jurisdiction. We do not knowingly collect personal data from children.

If we learn that we have collected personal data from a child without appropriate consent, we will take steps to delete that information as quickly as possible.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will post the revised policy on this page and update the "Last updated" date.

For material changes, we will notify you through the platform or by email before the changes take effect. Continued use of Deikora after changes indicates your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@deikora.com.