Privacy Policy

Testimonial Collector (“we,” “us,” or “our”) operates the website testimonialcollector.net. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

We collect information in the following ways:

• Account Information: When you create an account, we collect your name, email address, and profile picture (if signing in via Google OAuth).
• Testimonial Content: We store testimonials submitted through your collection forms, including the author’s name, email, role, company, avatar, rating, and written content.
• Payment Information: When you subscribe to our Pro plan, payment details are collected and processed directly by Stripe. We do not store your credit card number.
• Usage Data: We automatically collect information about how you interact with the service, including pages visited, features used, and device/browser information via Vercel Analytics.

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the service
• Process transactions and manage your subscription
• Send transactional emails (account verification, testimonial notifications, password resets)
• Respond to support inquiries
• Analyze usage patterns to improve the service
• Detect and prevent fraud or abuse

3. Cookies

We use essential cookies only, for authentication and session management. We do not use advertising or third-party tracking cookies. Vercel Analytics collects anonymous, aggregated usage data without cookies.

4. Third-Party Services

We use the following third-party services that may process your data under their own privacy policies:

• Supabase — database hosting and authentication
• Stripe — payment processing
• Vercel — hosting and analytics
• Resend — transactional email delivery

5. Data Retention

We retain your account data and testimonial content for as long as your account is active. When you delete your account, we delete your personal data and associated project data within 30 days, except where we are required by law to retain it.

6. Your Rights

You have the right to:

• Access your personal data we hold
• Correct inaccurate or incomplete data
• Delete your account and personal data
• Export your data in a portable format
• Object to or restrict certain processing activities

To exercise any of these rights, contact us at the email below.

7. GDPR Compliance (EEA Users)

If you are in the European Economic Area, our legal basis for processing your personal data is: (a) your consent, (b) performance of a contract (providing the service), or (c) our legitimate interests (improving the service and preventing abuse). You may withdraw consent at any time and lodge a complaint with your local data protection authority.

8. CCPA Compliance (California Residents)

California residents have the right to know what personal information is collected, request deletion of personal information, and opt out of the sale of personal information. We do not sell your personal information to third parties.

9. Children’s Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete it promptly.

10. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted data at rest, and secure authentication. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at gmahmamud@gmail.com.