Privacy Policy

1. What we collect

Account data: name, email address, and profile picture, provided through our authentication provider (Clerk) when you sign up, including via Google sign-in.

Usage data: the search queries sent to your API keys, along with metadata such as result counts, latency, category, and estimated cost. This powers your dashboard, quotas, and abuse prevention.

Billing data: subscription status and plan. Payment card details are collected and processed by Stripe and never touch our servers.

Technical data: standard server logs (IP address, user agent, timestamps) retained for security and debugging.

2. How we use it

To operate the service: authenticate you, enforce quotas and rate limits, show usage in your dashboard, and process payments.

To keep the service healthy: debugging, abuse detection, and aggregate performance monitoring.

We do not sell your personal data. We do not use your search queries to train models or share them with advertisers.

3. Third parties we rely on

Clerk (authentication), Stripe (payments, as merchant of record), Convex (database and API gateway), Vercel (web hosting), and Railway (search infrastructure). Each processes data only as needed to provide their service to us.

Search queries are forwarded to public search engines and the resulting web pages are fetched on your behalf; queries are not associated with your identity when forwarded.

4. Retention

Account data is kept while your account is active. Usage records are retained for billing and analytics. Server logs rotate on a short schedule. When you delete your account, we delete or anonymize your personal data within 30 days, except where retention is required for legal or accounting purposes.

5. Security

API keys are stored server-side and transmitted only over HTTPS. Access to production systems is restricted. No method of storage or transmission is completely secure; report suspected vulnerabilities to security@laurel.dev.

6. Your rights

You can access and update account information from your dashboard, rotate or revoke API keys at any time, and cancel your subscription from the billing portal. To request export or deletion of your data, email support@laurel.dev. Depending on your jurisdiction (e.g., GDPR, CCPA), you may have additional rights to access, correct, delete, or port your data, and to object to processing.

7. Children

The service is not directed at children under 13 and we do not knowingly collect their data.

8. Changes

We may update this policy from time to time. Material changes will be announced on this page with an updated effective date.

9. Contact

Privacy questions or requests: support@laurel.dev.