Privacy Policy

1. Introduction

Small St Value ("we," "us," or "our") operates the website smallstvalue.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Please also review our Terms of Service.

2. Information We Collect

We collect the following information when you sign in using Google OAuth:

• Your name
• Your email address
• Your profile picture (if available via your Google account)

If you subscribe to a paid plan, our payment processor Stripe will collect billing information such as your payment card details and billing address. We do not store your full payment card information on our servers.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

• Contractual necessity — to create your account and provide the Service as described in our Terms of Service.
• Legitimate interest — to send you emails about new posts, features, and updates related to the Service, where we have assessed that our interest does not override your rights.
• Consent — where required by law, we will obtain your consent before sending marketing communications. You may withdraw consent at any time.
• Legal obligation — to comply with applicable laws, such as retaining transaction records for tax purposes.

4. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Send you emails about new posts and content
• Notify you about new features and updates to the Service
• Process payments and manage subscriptions
• Respond to your inquiries and provide customer support

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

5. Third-Party Services

We use the following third-party services to operate the Service:

• Google OAuth — for authentication. Google's privacy policy applies to the information they collect during sign-in.
• Supabase — for data storage and authentication infrastructure. Data may be stored on servers in the United States.
• Stripe — for payment processing. Stripe's privacy policy governs how they handle your payment information.

6. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. If you are located in the EEA, UK, or Switzerland, we ensure that appropriate safeguards are in place for such transfers, including standard contractual clauses approved by the European Commission where applicable.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you wish to delete your account and all associated personal data, email us at info@smallstvalue.com and we will delete your personal data within 30 days, except where we are required to retain it by law (e.g., tax or billing records).

8. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information, including encryption in transit (TLS/SSL) and at rest. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the following rights under applicable data protection laws (including the GDPR, UK GDPR, and CCPA):

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — request deletion of your personal data.
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — request a machine-readable copy of your data.
• Right to object — object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Right to opt out of marketing emails — unsubscribe from any email we send, at any time.

To exercise any of these rights, email us at info@smallstvalue.com. We will respond to your request within 30 days (or sooner if required by applicable law). If you are in the EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.

10. Cookies

We use essential cookies and local storage to manage your authentication session. These are strictly necessary for the Service to function and do not require consent. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

11. Children's Privacy

Our Service is not directed to children under the age of 16 (or 13 in jurisdictions where that is the applicable age). We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Where required by law, we will notify you by email. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your data protection rights, please contact us at: info@smallstvalue.com