Privacy Policy

1. Who we are

Painly (“we”, “us”, “our”) is a SaaS tool that helps founders and marketers find high-intent leads on Reddit. Our service is operated from France. If you have any questions about this policy, contact us at hello@painly.app.

2. Data we collect

We collect only what is necessary to provide the service:

• ·Account data: Your email address and password hash when you create an account.
• ·Search history: The keywords you search, the subreddits you select, and the results we return to you. This data is stored to cache results, avoid duplicate API calls, and power your dashboard.
• ·Usage data: How many searches you have run this month, your current plan, and quota reset dates — used to enforce plan limits.
• ·Alert configuration: Keywords, subreddit lists, email address, and frequency preferences you configure for email alerts.
• ·Billing data: We do not store your payment card details. Stripe handles all payment data (see Section 4).
• ·Technical logs: Standard server logs (IP address, browser type, timestamps) retained for up to 30 days for security and debugging.

3. How we use your data

• ·To create and manage your account.
• ·To run Reddit searches on your behalf and display scored results.
• ·To send you email alert digests you have configured.
• ·To enforce monthly search quotas and plan limits.
• ·To process subscription payments and manage billing.
• ·To improve the service (aggregated, anonymised usage analytics only).
• ·To respond to support requests sent to hello@painly.app.

We do not sell your data to third parties. We do not use your search history for advertising purposes.

4. Third-party services

Painly relies on the following sub-processors to deliver the service. Each processes data under their own privacy policy:

5. Data retention

Your account data and search history are retained for as long as your account is active. Cached search results expire after 1 hour. Alert digests are sent and not retained beyond the current alert cycle. If you delete your account, all personal data is permanently deleted within 30 days.

6. Your rights (GDPR)

If you are in the European Union or EEA, you have the following rights under the General Data Protection Regulation (GDPR):

• ·Right of access: Request a copy of the personal data we hold about you.
• ·Right to rectification: Correct inaccurate data via your account settings.
• ·Right to erasure: Delete your account and all associated data via Settings → Account, or by emailing hello@painly.app.
• ·Right to portability: Request an export of your search data in a machine-readable format.
• ·Right to object: Object to processing based on legitimate interests.
• ·Right to restriction: Request we restrict processing of your data in certain circumstances.

To exercise any of these rights, email hello@painly.app. We will respond within 30 days.

7. Cookies

Painly uses only essential cookies required for authentication (session tokens managed by Supabase). We do not use advertising cookies or third-party tracking pixels.

8. Changes to this policy

We may update this policy from time to time. We will notify you by email or via an in-app notice if changes are material. The “Last updated” date at the top reflects the most recent revision.

9. Contact

Questions or requests: hello@painly.app