Privacy Policy

1. Information We Collect

• Public Website Metadata: When you scan a target URL via https://www.postbuild.dev or npx git-paid, postbuild inspects publicly accessible HTML tags, robots.txt, and sitemap.xml files.
• Account & Billing Data: Payments, tax calculations, and invoicing are processed by Stripe. We do not store raw payment card numbers on postbuild servers; we store only your checkout email address, entitlement status, and signed cryptographic license token state.
• Verification Inbox Messages: Automated directory confirmation emails sent to your tenant-isolated @postbuild.dev inbox address are processed solely to extract verification links and one-time confirmation codes for your launch submissions.
• Local Storage & Preferences: We use browser localStorage strictly for functional state (storing your active theme preference and signed pb_live_... session token on your device). We do not use third-party advertising cookies or cross-site behavioral trackers.

2. Third-Party Subprocessors

To operate the service reliably and securely, we rely on the following infrastructure subprocessors:

• Stripe, Inc. — Payment processing, subscription management, tax calculation, and invoice generation.
• Vercel, Inc. — Edge hosting, serverless API execution, and privacy-friendly web analytics.
• Resend, Inc. — Transactional sign-in/license fulfillment emails and inbound @postbuild.dev verification webhook routing.
• Cloudflare, Inc. — DNS resolution, DDoS mitigation, and email routing infrastructure.

3. Data Retention

• Verification Inbox Logs: Inbound verification emails and extracted OTP codes in @postbuild.dev inboxes are automatically purged after 30 days.
• Billing & Entitlement Records: License entitlement records and Stripe transaction identifiers are retained for the duration of your active license and as required by applicable tax and accounting laws.

4. Your Rights (GDPR & CCPA)

Depending on your jurisdiction (including the European Economic Area, United Kingdom, and California), you have the right to request access to, correction of, portability of, or deletion of your personal data. We never sell or rent personal data to third parties. To exercise any data right or request immediate purge of your account and verification inbox, email support@postbuild.dev.