Privacy Policy

1. Information We Collect

We collect the following categories of information:

Account information

When you create an account, we collect your name, email address, and authentication credentials. Authentication is handled by our identity provider, Clerk. If you choose to sign in with Google, we receive basic profile information from your Google Account as described in the “Google User Data” section below.

Contact data you provide

The Service exists to store the contacts you add. This includes names, phone numbers, email addresses, physical addresses, notes, and any contact photos you upload. This information is provided by you and stored on your behalf.

Uploaded images

Contact photos you upload are stored in our secure cloud storage. These images are associated only with your account.

Technical and usage information

We and our service providers may automatically collect limited technical data such as your IP address, browser type, device information, and log data used to operate, secure, and improve the Service.

2. Google User Data

If you sign in with Google, we request access only to your basic Google Account profile — specifically your name, email address, and profile picture. We use this information solely to:

• Create and authenticate your ContactRef account;
• Identify you within the Service and display your profile; and
• Communicate with you about your account.

We do not request access to your Gmail, Google Drive, Google Contacts, Calendar, or any other restricted or sensitive Google API scopes. We do not use Google user data for advertising, and we do not sell it.

ContactRef's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and operate the Service;
• Authenticate you and secure your account;
• Store and display the contacts and images you add;
• Respond to your requests and provide support;
• Detect, prevent, and address fraud, abuse, security, and technical issues; and
• Comply with legal obligations.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following limited circumstances:

• Service providers. We use trusted third parties to operate the Service, including Clerk for authentication and Supabase for database and image storage. These providers process data only to provide services to us and under their own privacy commitments.
• Legal reasons. We may disclose information if required by law, regulation, legal process, or a governmental request, or to protect the rights, property, or safety of ContactRef, our users, or the public.
• Business transfers. If ContactRef is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

5. Data Retention and Deletion

We retain your account and contact data for as long as your account is active. You can delete individual contacts at any time from within the Service. When your account is deleted, we remove your account record and delete the associated contact data and uploaded images from our database and storage. Some information may be retained where required to comply with legal obligations or resolve disputes.

To request deletion of your account or data, contact us at contact@simplemart.dev.

6. Data Security

We take reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and row-level security that restricts data access to the account that owns it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can access and update most of your data directly within the Service, or contact us to exercise these rights. You may also revoke ContactRef's access to your Google Account at any time through your Google Account permissions page.

8. Children's Privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. International Users

The Service is operated using cloud infrastructure that may process and store data in countries other than your own. By using the Service, you understand that your information may be transferred to and processed in those locations.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service or by email where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at contact@simplemart.dev.