1. What we collect
Botapolis collects the minimum it needs to operate: your email when you sign up via Supabase Auth, a SHA-256-hashed IP for /go/* anti-fraud and rate limiting, and aggregate analytics via Plausible (cookieless) plus event-based capture via PostHog.
We don't share your email or behaviour with anyone outside the processors listed in section 4.
2. Why we collect it
- Email — so we can store your saved calculations, activity, and newsletter preferences.
- IP hash — to block automated affiliate-click fraud and rate-limit the AI tools.
- Analytics — to understand which articles and calculators land, and retire the ones that don't.
3. Cookies
We only set functional cookies: the Supabase session cookie for sign-in and `theme` for remembering your dark/light preference. Plausible runs cookieless. PostHog uses localStorage + a distinct_id cookie (disable in your browser if you prefer).
4. Third-party processors
- Supabase — auth + database, EU/US regions
- Vercel — hosting
- Plausible — web analytics, EU-only
- PostHog — event analytics
- Beehiiv — newsletter delivery
- Anthropic — AI inference for the product-description tool
- Upstash — Redis for rate limiting
5. Your rights (GDPR / CCPA)
You can request a copy of your data, its deletion, or an export by emailing privacy@botapolis.com. We respond within 30 days.
Deleting your account from the dashboard cascades through saved_calculations and content_likes — your row IDs vanish along with the user record.
6. Policy updates
This policy was last updated 2026-05-11. Material changes are announced via newsletter and an on-site banner 30 days before they take effect.