Privacy Policy

Last updated: January 2026

EchoDeck (“we”, “us”, or “our”) values your privacy. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

1.1 Information You Provide

  • Email address: Used for authentication, billing, and support.
  • Nostr public key (pubkey): Used for identity verification and content access.

1.2 Automatically Collected Data

  • Basic usage and diagnostic data (e.g., feature usage, error logs).
  • Device and browser metadata (via standard analytics).

2. How We Use Your Information

We use your data to:

  • Provide and maintain the EchoDeck service
  • Authenticate users and manage subscriptions
  • Process payments and invoices
  • Generate AI-powered summaries
  • Communicate service updates and support messages

3. Third-Party Services

EchoDeck relies on trusted third-party providers:

3.1 Stripe (Payments)

  • Used for subscription billing and payment processing.
  • EchoDeck does not store credit card information.
  • Stripe handles all payment data securely.

3.2 Supabase (Authentication & Database)

  • Used for user authentication and data storage.
  • Stores email addresses, account metadata, and preferences.

3.3 OpenAI (AI Summaries)

  • Used to generate AI-based content summaries.
  • Content sent to OpenAI is processed according to their API policies.
  • We do not use your data to train our own AI models.

4. Data Ownership & Nostr Content

  • EchoDeck does not own or control content published on Nostr.
  • We only store minimal metadata required to provide client functionality.

5. Data Retention

  • We retain your personal data only as long as necessary to provide the Service or comply with legal obligations.
  • You may request deletion of your account and associated data.

6. Data Security

  • We implement reasonable technical and organizational measures to protect your data.
  • However, no system is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Withdraw consent

To exercise these rights, contact us at support@echodeck.io.

8. Children’s Privacy

  • EchoDeck is not intended for users under 18.
  • We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact:
contact@echodeck.io