1. Introduction

PainRadar (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our website and services at painradar.top (the “Service”).

2. Information We Collect

Account Information: When you sign up, we collect your email address and basic profile information provided through your authentication provider (Google or GitHub).

Usage Data: We collect information about how you interact with our Service, including scan queries, pages visited, and feature usage.

Payment Information: Payments are processed by our third-party payment provider (Creem). We do not store your credit card details. We receive transaction confirmations and subscription status.

API Keys (BYOK): If you provide your own API key for the Bring Your Own Key feature, it is used solely for processing your scan requests and is not stored on our servers after the session ends.

3. How We Use Your Information

To provide, maintain, and improve the Service
To process transactions and manage subscriptions
To send service-related communications (e.g., account confirmations, security alerts)
To respond to support requests
To detect and prevent abuse or fraud

We do not sell your personal information to third parties.

4. Data Storage & Security

Your data is stored securely using Supabase infrastructure with encryption at rest and in transit. We implement industry-standard security measures to protect your information. However, no method of electronic storage is 100% secure.

5. Third-Party Services

We use the following third-party services:

Supabase — Authentication and data storage
Vercel — Hosting and deployment
Creem — Payment processing
Anthropic (Claude) — AI analysis of publicly available Reddit data

Each third-party service has its own privacy policy governing its use of your data.

6. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Export your data in a portable format

To exercise these rights, contact us at gaotong86@126.com.

8. Data Retention

We retain your account data for as long as your account is active. Scan results and reports are retained for 90 days. You can request deletion of your data at any time.

9. Children's Privacy

Our Service is not directed to individuals under 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes via email or a notice on our website. Continued use of the Service after changes constitutes acceptance.

11. Contact

Questions about this policy? Contact us at gaotong86@126.com.

Privacy Policy