Privacy Policy

Last updated: June 20, 2026

This Privacy Policy explains how Unsaved Changes, LLC ("we") collects and uses personal data when you use PriorityInbox.

1. Data we collect

  • Account data — email, display name, username, avatar, password hash, authentication tokens.
  • Creator profile data — bio, pricing, tiers, links.
  • Message data — paid DM content, sender/recipient, timestamps, read/reply status.
  • Payment data — handled by Stripe. We receive transaction IDs, amounts, currency, and last-4 of card. We do not store full card numbers.
  • Technical data — IP address, browser, device, basic usage logs, error reports.

2. How we use it

  • Operate the service: route paid DMs, process payments, calculate payouts.
  • Account security and fraud prevention.
  • Customer support and service announcements.
  • Aggregate analytics to improve the product.

We do not sell personal data and we do not use message content to train AI models.

3. Legal bases (EEA/UK users)

We rely on contract (to provide the service you requested), legitimate interests (security, product improvement), legal obligation (tax and accounting), and consent (optional marketing emails).

4. Subprocessors

We share data only with vendors needed to run the service:

  • Stripe — payments and subscription billing.
  • Lovable Cloud — managed database, authentication, hosting.
  • Google Cloud / Search Console — SEO and analytics.

5. Retention

We retain account and message data for as long as your account is active. After account deletion we delete or anonymize personal data within 30 days, except where retention is required for legal, tax, or fraud-prevention purposes.

6. Your rights

You can access, correct, export, or delete your data from your dashboard, or by emailing privacy@priorityinbox.app. EEA/UK and California residents have additional rights under GDPR/CCPA, including the right to object, restrict processing, and lodge a complaint with a supervisory authority.

7. Cookies

We use strictly necessary cookies for authentication and session management. We do not use third-party advertising cookies.

8. International transfers

Data may be processed in the United States and other countries where our subprocessors operate. Where required, we rely on Standard Contractual Clauses.

9. Children

PriorityInbox is not directed to anyone under 18. We do not knowingly collect data from children.

10. Security

We use encryption in transit (TLS), encryption at rest for the database, role-based access controls, and row-level security. No system is perfectly secure; report vulnerabilities to security@priorityinbox.app.

11. Changes

We will post updates here and update the "Last updated" date. Material changes will be notified in-app or by email.

12. Contact

Unsaved Changes, LLC · privacy@priorityinbox.app