Privacy Policy

Space Worm Analytics ("Space Worm," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS metrics dashboard service at spaceworm.io (the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the Service.

1. Information We Collect

Account Information

When you create an account, we collect information you provide directly, including:

• Email address
• Full name
• Profile avatar (if provided)
• Organization name

Billing Information

Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other sensitive payment information on our servers. Stripe may collect and process your payment information in accordance with their own privacy policy.

Business Data Synced from Integrations

When you connect a payment provider (such as Stripe) to Space Worm Analytics, we sync and store the following business data to provide our analytics service:

• Customer records (names, email addresses, subscription status, plan information)
• Transaction data (amounts, currencies, dates, payment statuses)
• Subscription and revenue metrics (MRR, ARR, churn rates, growth metrics)
• Historical revenue data for trend analysis

Usage Data

We automatically collect certain information when you interact with the Service, including pages viewed, features used, and actions taken within the dashboard. This helps us improve the product experience.

Cookies and Session Data

We use cookies and similar technologies to maintain your authenticated session. Our authentication system (powered by Supabase) stores session tokens in secure, HTTP-only cookies. We do not use third-party advertising or tracking cookies.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: Processing your business data to generate analytics dashboards, metrics, reports, insights, and alerts.
• Account Management: Creating and managing your account, authenticating your identity, and managing team memberships and roles.
• Billing: Processing subscription payments, managing plan tiers, and handling upgrades or downgrades.
• Communications: Sending transactional emails such as scheduled reports, team invitations, alert notifications, and account-related updates.
• Product Improvement: Analyzing usage patterns in aggregate to improve features, fix bugs, and develop new functionality.
• Support: Responding to your requests, troubleshooting issues, and providing customer support.

3. Third-Party Services

We use the following third-party services to operate Space Worm Analytics. Each has their own privacy practices:

We do not sell your data to third parties. We do not use third-party advertising networks or tracking services.

4. Data Retention

The retention period for your synced business analytics data depends on your subscription plan:

Your account information (email, name, organization details) is retained for as long as your account is active. If you delete your account, we will delete your personal data and synced business data within 30 days, except where we are required to retain it by law.

5. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures, including:

• All data is transmitted over encrypted HTTPS connections
• Database access is protected by row-level security (RLS) policies, ensuring users can only access data belonging to their organization
• Authentication tokens are stored in secure, HTTP-only cookies
• Stripe API keys and integration credentials are stored securely and never exposed to the client
• Regular security reviews of our infrastructure and dependencies

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data:

• Access: You can access your account data at any time through the dashboard settings.
• Correction: You can update your profile information (name, email, avatar) through your account settings.
• Data Export: You can export your analytics data in CSV format (available on all plans) or PDF format (available on Pro and Business plans).
• Deletion: You can request deletion of your account and all associated data by contacting us. Account deletion is permanent and cannot be reversed.
• Restriction: You can request that we restrict processing of your personal data in certain circumstances.
• Objection: You can object to the processing of your personal data where we rely on legitimate interests.

To exercise any of these rights, please contact us at the address provided below.

7. Children's Privacy

Space Worm Analytics is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected personal information from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Our third-party service providers (Supabase, Stripe, Resend) may process data in various locations. By using the Service, you consent to the transfer of your information to these locations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, sending you an email notification. We encourage you to review this page periodically for the latest information on our privacy practices.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: