Privacy Policy

Information We Collect

When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, we collect billing information through our payment processor (Stripe). We do not store credit card numbers on our servers.

When you use the Experiwall SDK in your app, we collect anonymized event data such as paywall impressions, taps, and conversion events. This data is associated with random identifiers — not personally identifiable information from your end users.

We automatically collect usage data when you interact with our dashboard, including pages visited, features used, and performance metrics. This helps us improve the product.

How We Use Your Information

We use your information to provide and maintain the Experiwall service, process transactions, send transactional emails (account confirmations, billing receipts, product updates), and improve the product based on usage patterns.

We use aggregated, anonymized SDK event data to power analytics dashboards, run A/B test calculations, and generate experiment reports for your account.

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

Third-Party Services

We use the following third-party services to operate Experiwall: Supabase (database and authentication hosting), Stripe (payment processing), and Vercel (application hosting). Each of these providers has their own privacy policies governing their handling of data.

We may use analytics tools to understand how the dashboard is used. Any analytics data collected is aggregated and does not identify individual users.

Cookies

We use essential cookies to maintain your authenticated session and remember your preferences. We do not use third-party advertising or tracking cookies.

Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will remove your personal information within 30 days. Aggregated, anonymized analytics data may be retained indefinitely.

SDK event data is retained for the duration of your subscription. Upon account deletion or request, we will purge all associated event data within 30 days.

Your Rights

You have the right to access, correct, or delete your personal information at any time. You can export your data or request account deletion by contacting us directly.

If you are located in the European Economic Area, you have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security on our database, and regular security reviews. While no system is 100% secure, we take the protection of your data seriously.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or an in-app notification. Continued use of the service after changes constitutes acceptance.

Contact

If you have questions about this privacy policy or your data, contact Marcelo directly at privacy@experiwall.com.