Privacy Policy

Account data: Your email address and display name when you create an account.

Payment data: Billing is processed entirely by Stripe. We never receive or store your full credit card number. We only store your Stripe customer ID and subscription status.

API credentials: If you connect third-party API keys (NewsAPI, ACLED, Perplexity, OpenSky), they are stored encrypted in our database. We only use them to make requests on your behalf — never shared or used outside your account.

Usage data: Basic usage logs (page visits, feature interactions) collected by Vercel and Supabase infrastructure for performance and error monitoring. We do not sell this data.

Preferences: Language, theme, and notification settings stored in your account profile.

We use your data solely to operate and improve OBSERVE:

• Authenticate your account and manage your session
• Process subscription payments via Stripe
• Deliver platform intelligence features (map, briefings, alerts)
• Send transactional emails (password reset, billing receipts)
• Diagnose technical errors and improve performance

We do not use your data for advertising, profiling, or any purpose unrelated to running the OBSERVE service.

OBSERVE relies on the following sub-processors to deliver the service:

• Supabase — authentication and database hosting (EU/US data centers)
• Stripe — payment processing (PCI-DSS Level 1 certified)
• Vercel — application hosting and edge infrastructure

Each provider has its own privacy policy and data processing agreements. We do not share your data with any other third parties.

We retain your account data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial records required for tax compliance, retained for 7 years).

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Update inaccurate data via your account settings
• Deletion: Request erasure of your account and personal data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing where we rely on legitimate interests

To exercise any of these rights, email us at privacy@observe.center.

OBSERVE uses only essential cookies required for authentication (session tokens managed by Supabase). We do not use tracking cookies, advertising cookies, or analytics cookies beyond what is embedded in our infrastructure providers.

All data is transmitted over HTTPS/TLS. API credentials are encrypted at rest. Supabase enforces Row-Level Security (RLS) ensuring each user can only access their own data. We perform regular dependency updates and security reviews.

OBSERVE is hosted on infrastructure in the United States and European Union. If you are located outside these regions, your data may be transferred to and processed in these jurisdictions. We rely on Supabase's and Vercel's Standard Contractual Clauses for GDPR-compliant transfers.

OBSERVE is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us immediately at privacy@observe.center.

We may update this Privacy Policy from time to time. We will notify subscribers by email of any material changes at least 14 days before they take effect. Continued use of the platform after changes constitutes acceptance.

For privacy questions or requests, contact us at privacy@observe.center.