Privacy

This draft is for DELTA X TECHNOLOGY CORP.. It describes what this app stores today. It is not a certification, and it is not a finished legal review.

An account stores an email address and a display name. The password is handled by Supabase Auth and is not written into the account table. A job can store a document reference, the service you choose, the page count read from the PDF, a recipient name, a delivery option, prices in cents, and a status. A count typed into a form is not the billed page count.

One PDF, up to 8 MB, can be stored for a job in private Supabase Storage. The file is named by its SHA-256 hash. The app checks that it is US Letter and counts its pages. It does not scan it for malware, and a stored file starts unscanned. The connector does not fetch a file from a chat or from a URL.

A billing consent row stores the terms version and the time it was accepted or turned off. A payment setup row can store a Stripe reference after hosted Checkout setup. Card numbers are not stored here. Stripe is used for that setup and for signed webhooks. Live charges are off. A payment-method key, if recorded after the unapplied database change, is a hash in a private table. It is not shown on the account and it is not an identity check.

A connector registration stores the client name and the exact redirect addresses. Access and refresh tokens are stored only as hashes. Session cookies are limited to the host that set them. They are HttpOnly and SameSite=Lax, and they are marked Secure on HTTPS. They are not shared with the root website.

Account rows and private files sit in the dedicated Supabase project. The app process runs on the existing AWS Lightsail container. No mail provider is selected. Promotional credit is not being granted while its budget is unset. How long rows and files are kept is not set.

A privacy request can be sent to admin@deltaxtechnology.com. This page does not send that message. It has not checked that the mailbox receives mail, and it does not promise a reply time.

A deletion request is not implemented. This draft does not promise that a file, a backup, or a provider copy is removed.