Privacy Policy

1. Introduction

Raseen ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials (managed through Supabase Auth). If you sign up via a third-party OAuth provider (e.g., Google), we receive your basic profile information as authorized by you.

2.2 Billing Platform Connections

When you connect a billing platform (Stripe, Paddle, or Lemon Squeezy), we store an encrypted API key or OAuth access token solely for the purpose of reading your billing data. We do not store raw payment card data, bank details, or any sensitive payment instrument information.

2.3 Transaction Data

We sync and store normalized billing data from your connected platforms, including transaction amounts, fees, refunds, customer email addresses (if available), transaction dates, and descriptions. This data is used to generate revenue summaries and export reports.

2.4 Usage Data

We automatically collect certain information when you use the Service, including your IP address, browser type, operating system, pages visited, time spent on pages, and other diagnostic data. This helps us improve the Service and your experience.

2.5 Cookies and Similar Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. Essential cookies are required for authentication and cannot be disabled. You may control optional cookies through your browser settings.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process and normalize your billing data into revenue summaries
• Generate accountant-ready CSV export reports
• Authenticate your identity and prevent unauthorized access
• Send you transactional emails (e.g., account confirmations, password resets)
• Communicate with you about product updates, security alerts, and support messages
• Monitor and analyze usage trends to improve the Service
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your data only in the following limited circumstances:

• Service Providers: We use third-party providers (e.g., Supabase for database and auth, Stripe for our own payment processing, Vercel for hosting) that process data on our behalf under strict contractual obligations.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy protections.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) for all data transfers
• Encryption at rest for stored API keys and sensitive connection data
• Row-level security (RLS) policies ensuring users can only access their own data
• Regular security audits and dependency updates
• Access controls limiting who within our team can access user data

While we strive to use commercially acceptable means to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data and billing connections within 30 days, except where we are required to retain certain records for legal, tax, or accounting purposes (up to 7 years).

Transaction data and revenue summaries may be retained in anonymized, aggregated form for product analytics after account deletion.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data and account
• Export: Request your data in a portable, machine-readable format
• Objection: Object to processing of your data for specific purposes
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, contact us at privacy@rassen.tech. We will respond to your request within 30 days.

8. International Data Transfers

Your data may be processed in countries other than your own. We ensure that any international transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) or equivalent mechanisms, in compliance with applicable data protection laws (GDPR, CCPA, etc.).

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at: