Privacy Notice

• Card or payment details — never. Checkout is handled entirely by Paddle (our merchant of record). Your card number never touches FigJoy's servers.
• No advertising trackers. No Facebook pixel, no Google Ads tag, no cross-site tracking cookies.
• No selling of data. Your data is not sold or rented to anyone, full stop.

You sign in with Google. When you do, we store the basics Google shares: your name, email address and avatar. Authentication and the account database run on Supabase, hosted in the European Union (eu-west-1).

At sign-in we also record your approximate location — country, region and city — derived from your IP address by our hosting provider's headers. We store that derived location in your profile (the IP address itself is not stored) to understand where FigJoy's users are and for tax/compliance reporting.

• Library activity — components you copy or save are linked to your account so your saved list and history work.
• Studio (AI builder) prompts — when you describe a page, that text is sent to Groq (our AI inference provider) to plan the layout. We don't use your prompts to train models.
• Job board submissions — whatever you type into a listing or application form, stored so the listing works.

We use Vercel Analytics — an aggregate, privacy-friendly analytics tool that works without cross-site tracking cookies and does not build individual profiles. It tells us things like "the prompts page got 500 visits", not "this person visited".

The complete list of third parties — each one only sees what it needs:

• Supabase (EU) — database, authentication, file storage.
• Google — sign-in only ("Sign in with Google").
• Vercel — hosting, content delivery and the aggregate analytics above.
• Groq — AI inference for Studio (receives only the prompt text you type there).
• Paddle — checkout, payment, tax and invoicing as merchant of record (sees your billing details; we see your order status, never your card).

There is currently no email-marketing service — the only emails you get are transactional or written by me personally.

FigJoy uses:

• Essential auth cookies (set by Supabase) — they keep you signed in. No consent banner is needed for essential cookies, and we set no others.
• Browser local storage for small conveniences that never leave your device: remembering that you closed the welcome modal, your language preference, and unsent drafts in the jobs flow.

Account data is kept for as long as your account exists. Delete your account (or ask me to) and it goes with it. Aggregate analytics contain nothing identifying you to begin with.

You can ask to access, correct or delete the data linked to your account at any time — email hamzahadjtaieb@gmail.com from the address on your account and I'll handle it personally, normally within a few days.

The data controller for FigJoy is AsYouAre, a sole proprietorship, reachable at hamzahadjtaieb@gmail.com.

If what FigJoy collects ever changes, this page changes with it and the "Last updated" date at the top moves. Significant changes will be announced on the site, not buried here.