Privacy Policy

1. Introduction

Policara (“we,” “us,” or “our”) operates the website at policara.com. This Privacy Policy explains what personal data we collect, why we collect it, and how we protect it. We are committed to handling your data responsibly and in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Information we collect

We collect the following categories of personal data:

• Email address — provided when you save a generated document or join our waitlist.
• Intake wizard answers — the information you provide about your product (platform type, services used, data practices) so we can generate your legal document. This data describes your product, not you personally.
• Anonymous usage analytics — we use Plausible Analytics, a privacy-friendly, cookieless analytics service. Plausible does not collect personal data or use cookies. Aggregate page-view and referrer data is collected without identifying individual visitors.
• Anonymous authentication identifier — we use Supabase anonymous sign-in to associate your generated documents with your session. No personal information is required for this.

We do not collect payment card details, precise location, health data, biometric data, or any special category data.

3. How we use your information

• To generate your legal documents based on the intake answers you provide.
• To send you a copy of your document by email (if you provide your email).
• To send product updates you have opted into.
• To improve the service based on aggregate, anonymized usage patterns.
• To comply with legal obligations.

We do not sell or share your personal data with third parties for their own commercial purposes or for cross-context behavioural advertising.

4. Third-party services

We use the following third-party services to operate Policara:

• Vercel — website hosting (processes server logs including IP addresses).
• Supabase — authentication and database (stores your anonymous session and generated documents).
• Plausible Analytics — privacy-friendly, cookieless website analytics (no personal data collected).
• Resend — transactional email delivery (processes your email address when you save a document).
• OpenRouter / Anthropic — AI language model API (your intake answers are sent as prompt context to generate the document; no personal data is stored by the AI provider beyond the API request).

Each provider processes data in accordance with their own privacy policies. We select providers that offer strong data protection commitments.

5. Data retention

• Intake wizard answers are stored in your browser's session storage and are automatically cleared when you close the tab.
• Generated documents are stored in our database until you request deletion.
• Email addresses are retained until you unsubscribe or request deletion.

6. Cookies and tracking

Policara does not use tracking cookies. Plausible Analytics is entirely cookieless. We store one item in your browser's local storage (policara_analytics_consent) to remember your analytics consent preference. No third-party cookies are set.

7. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your personal data.
• Portability — receive your data in a structured, machine-readable format.
• Opt-out of sale — we do not sell personal data, but you may exercise this right under CCPA.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at hello@policara.com. We will respond within 30 days.

8. Children's privacy

Policara is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. If we make material changes, we will notify users by email where possible.

10. Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at hello@policara.com.