Privacy Policy

Overview

SoupDeck (“we”, “us”) collects and uses information to provide and improve the Service. This policy explains what we collect, why, and how you can control your data.

Data We Collect

• Account data: name, email, WorkOS user id (user_...), and SSO profile id (profile_...) where available.
• Content you provide: files, documents, and inputs you upload to the Service.
• Usage data: logs, analytics, and performance data to operate and improve the Service.
• Payment data: payment processor identifiers (e.g., Stripe customer id). We do not store full card numbers; Stripe handles card data.

How We Use Data

We use data to provide the Service (authenticate users, process payments, run AI features), detect abuse, and improve product quality. We may send transactional emails (billing receipts, support).

Third‑Party Processors

We rely on third parties for certain services:

• WorkOS - authentication and SSO. We may store WorkOS ids and rely on their APIs for user management.
• Stripe - payments and subscriptions; Stripe processes card data under its own privacy rules.
• Bunny - optional CDN storage for uploads.

Retention & Deletion

We retain account and content data as necessary to provide the Service and comply with legal obligations. You may request deletion of your account and data by contacting us; residual copies may persist for a short period for backup and fraud prevention.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, port, or delete your data. To exercise these rights, contact us at [email protected].

Cookies & Tracking

We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies via your browser settings.

Security

We apply industry standard measures to protect data. However no service is fully secure; report suspected incidents to [email protected].

International Transfers

Data may be processed in countries outside your own, as necessary to provide the Service (including by WorkOS and Stripe).

Children

Our Service is not directed to children under 16. If you believe a child’s personal data has been collected, contact us to request deletion.

Contact

Questions or requests: [email protected]