Privacy Policy

1. Who we are

Invisible Glitch ("we", "us", "our") operates the website at invisibleglitch.com and the client dashboard at the same domain. We are the data controller for any personal data collected through these services.

2. What we collect

Contact form submissions — name, email address, phone number (optional), and the message you send us. This is stored in our database and used only to respond to your inquiry.

Client dashboard accounts — email address and password hash (stored by Supabase Auth). Accounts are created by us, not self-registered. We collect service request details, deployment records, and CRM data you enter.

Session data — authentication cookies (httpOnly, secure) used solely to keep you signed in. We do not use advertising or analytics cookies at this time.

3. How we use it

• To respond to contact inquiries within one business day
• To provide and maintain client dashboard access
• To track service delivery status and CRM data on your behalf
• To send transactional communications (account setup, service updates)

We do not sell your data. We do not share it with third parties except as needed to deliver the service (Supabase for database hosting, Vercel for application hosting).

4. Data storage and security

Your data is stored in a Supabase PostgreSQL database provisioned through Vercel. All connections are encrypted in transit (TLS). Row-level security ensures each client account can only access its own data. Backups are managed by Supabase per their standard backup policy.

5. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. To exercise any of these rights, email us at invisible.glitch@outlook.com. We will respond within 30 days.

6. Cookies

We use one first-party httpOnly cookie for authentication. It is strictly necessary and does not require consent under most privacy frameworks. We use no third-party cookies, no advertising cookies, and no analytics cookies at this time. See our Cookie Policy for full details.

7. Data retention

Contact form submissions are retained until you request deletion. Client account data is retained while the account is active and deleted within 30 days of account termination, unless we are required by law to retain it longer.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to active clients by email. The "last updated" date at the top of this page reflects the most recent revision.

9. Contact

Questions about this policy: invisible.glitch@outlook.com

Note: This policy is a working draft. It has not been reviewed by legal counsel and should not be relied on as legal advice. Have it reviewed before serving regulated markets or significant volumes of personal data.