Privacy Policy
Last updated: June 20, 2026
This Privacy Policy explains how Unsaved Changes, LLC ("we") collects and uses personal data when you use PriorityInbox.
1. Data we collect
- Account data — email, display name, username, avatar, password hash, authentication tokens.
- Creator profile data — bio, pricing, tiers, links.
- Message data — paid DM content, sender/recipient, timestamps, read/reply status.
- Payment data — handled by Stripe. We receive transaction IDs, amounts, currency, and last-4 of card. We do not store full card numbers.
- Technical data — IP address, browser, device, basic usage logs, error reports.
2. How we use it
- Operate the service: route paid DMs, process payments, calculate payouts.
- Account security and fraud prevention.
- Customer support and service announcements.
- Aggregate analytics to improve the product.
We do not sell personal data and we do not use message content to train AI models.
3. Legal bases (EEA/UK users)
We rely on contract (to provide the service you requested), legitimate interests (security, product improvement), legal obligation (tax and accounting), and consent (optional marketing emails).
4. Subprocessors
We share data only with vendors needed to run the service:
- Stripe — payments and subscription billing.
- Lovable Cloud — managed database, authentication, hosting.
- Google Cloud / Search Console — SEO and analytics.
5. Retention
We retain account and message data for as long as your account is active. After account deletion we delete or anonymize personal data within 30 days, except where retention is required for legal, tax, or fraud-prevention purposes.
6. Your rights
You can access, correct, export, or delete your data from your dashboard, or by emailing privacy@priorityinbox.app. EEA/UK and California residents have additional rights under GDPR/CCPA, including the right to object, restrict processing, and lodge a complaint with a supervisory authority.
7. Cookies
We use strictly necessary cookies for authentication and session management. We do not use third-party advertising cookies.
8. International transfers
Data may be processed in the United States and other countries where our subprocessors operate. Where required, we rely on Standard Contractual Clauses.
9. Children
PriorityInbox is not directed to anyone under 18. We do not knowingly collect data from children.
10. Security
We use encryption in transit (TLS), encryption at rest for the database, role-based access controls, and row-level security. No system is perfectly secure; report vulnerabilities to security@priorityinbox.app.
11. Changes
We will post updates here and update the "Last updated" date. Material changes will be notified in-app or by email.
12. Contact
Unsaved Changes, LLC · privacy@priorityinbox.app