Privacy Policy

Overview

Suede Manager (“we,” “us,” or “our”) operates the Suede Manager website at suedemanager.web.app and the Suede Manager iOS application (collectively, the “Service”). This policy explains what information we collect, how we use it, and your rights regarding that information.

By using the Service, you agree to the collection and use of information as described in this policy. If you have questions, contact us at support@suedemanager.com.

Information We Collect

Application information. When you apply to become a Suede Manager, we collect your full name, email address, business phone number, business name, city, website URL, and any referral code you provide. This information is used to review and process your application.

Account information. When you create a Suede Manager account, we store your name and email address. Your password is managed securely by Firebase Authentication and is never stored in plaintext by us.

Subscription and payment information. Subscription payments are processed by Stripe. We do not store your credit card number or full payment details. Stripe provides us with subscription status, billing period dates, and anonymized payment identifiers. See Stripe’s privacy policy for details on how they handle payment data.

Notification content. Messages you send through the Service are stored in our database and associated with your account and your business. All messages are reviewed by automated content moderation before delivery (see “Third-Party Services” below).

Usage information. We collect information about how you use the Service, including notifications sent, timestamps, and your IP address. This information is used for security auditing, rate limiting, and service improvement.

Device and technical information. Firebase may collect device identifiers, IP addresses, and app version information as part of providing authentication and messaging services.

How We Use Your Information

• To review and process business applications
• To create and manage your Suede Manager account
• To deliver push notifications to your subscribers via Firebase Cloud Messaging
• To process and manage your subscription through Stripe
• To send transactional emails (application confirmation, account invitations, billing notices)
• To moderate notification content for compliance with our terms of service
• To detect fraud, abuse, and unauthorized access
• To maintain security audit logs of account activity

How We Share Your Information

We do not sell your personal information. We share data only as necessary to operate the Service, as described below:

• Service providers. We share data with third-party vendors (Google Firebase, Stripe, Resend, OpenAI) solely to provide the Service. Data is transmitted to these providers via encrypted API calls over TLS. Each provider is contractually prohibited from using your data for their own purposes beyond what is necessary to deliver their service.
• Law enforcement. We may disclose personal data to government authorities or law enforcement when required by law, court order, or to protect the safety of any person.
• Business transfers. If Suede Manager is acquired, merged, or its assets are sold, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
• With your consent. We may share your information for any other purpose with your explicit consent.

Third-Party Services

We use the following third-party services to operate the Service. Each has its own privacy policy and data handling practices.

Google Firebase. We use Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Hosting, and Firebase Cloud Messaging (FCM). Firebase may collect email addresses, IP addresses, device identifiers, and Firebase installation IDs. Firebase is operated by Google LLC. Firebase Privacy Policy

Google reCAPTCHA Enterprise. Our web application is protected by Google reCAPTCHA Enterprise to detect fraudulent and automated activity. reCAPTCHA collects hardware and software information (such as device and application data) and sends that data to Google for analysis. The use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

Stripe. Subscription billing is handled by Stripe, Inc. When you subscribe, you interact directly with Stripe’s secure payment interface. Stripe may collect payment method details, billing address, and transaction history. Stripe Privacy Policy

Resend. Transactional emails (such as application confirmations, account invitations, and billing notices) are delivered via Resend. Your email address and the content of these emails are processed by Resend. Resend Privacy Policy

OpenAI. Notification messages you write are submitted to OpenAI’s Moderation API to check for prohibited content before delivery. Message text is processed by OpenAI but is not used to train their models. OpenAI Privacy Policy

Data Retention

We retain your account information for as long as your account is active. Application data is retained indefinitely for record-keeping purposes. Notification content and audit logs are retained to support security investigations and compliance. You may request deletion of your personal data by contacting us at support@suedemanager.com.

Data Security

All data is encrypted in transit (TLS) and at rest via Google Cloud infrastructure. Access to personal data is restricted to authorized personnel. We maintain security audit logs of all account actions. While we take reasonable measures to protect your information, no method of transmission over the internet is 100% secure.

Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict certain processing of your data
• Data portability (receiving your data in a structured format)

To exercise any of these rights, contact us at support@suedemanager.com.

Cookies

We do not use cookies for tracking or advertising. Google reCAPTCHA Enterprise sets a functional cookie (_GRECAPTCHA) required for fraud protection. This cookie does not track you across other websites and cannot be used to identify you personally.

Law Enforcement

We may disclose your personal information if required to do so by law or in response to a valid request from a law enforcement authority. Notification messages flagged by our automated moderation system are retained and may be provided to authorities if the content warrants it.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users via email within 72 hours of becoming aware of the breach, in accordance with applicable law. The notification will describe the nature of the breach, the data affected, and the steps we are taking in response.

California Privacy Rights (CalOPPA & CCPA)

California residents have additional rights under the California Online Privacy Protection Act (CalOPPA) and the California Consumer Privacy Act (CCPA):

• You may request a list of the categories of personal information we have collected about you and the purposes for which it is used
• You may request deletion of your personal information, subject to certain exceptions
• We do not sell your personal information to third parties
• You may designate an authorized agent to make requests on your behalf

To exercise these rights, contact us at support@suedemanager.com.

Children’s Privacy

The Service is intended for business owners and managers and is not directed at children under the age of 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

Contact

For questions or concerns about this privacy policy or how we handle your data, contact us at support@suedemanager.com.