1. Information we collect

When you use neverboringnow (“the Service”), we collect:

Account information — Email address (for authentication via magic link)
Survey data — Questions you submit and AI-generated responses
Usage data — Pages visited, features used, browser type, IP address
Cookies — Essential cookies (authentication session) and optional analytics cookies (Google Analytics, with your consent)

2. How we use your data

Provide and operate the survey service
Authenticate your identity and maintain your session
Send transactional emails (magic links, survey results)
Send product updates and announcements (you can unsubscribe anytime)
Analyze usage to improve the service

We do not sell, rent, or trade your personal data to third parties.

3. Third-party services

We use the following third-party services to operate:

Supabase (database, authentication) — Your data is stored on Supabase's infrastructure with row-level security. Supabase Privacy Policy
OpenAI (AI response generation) — Your survey questions are processed through OpenAI's API to generate persona responses. Questions may be subject to OpenAI's Privacy Policy. We use the API with data retention disabled where available.
Cloudflare (hosting, CDN) — Cloudflare Privacy Policy
Google Analytics (usage analytics, with consent) — We use Google Analytics to understand how the Service is used. Analytics cookies are only set if you consent. Google Privacy Policy
Lemon Squeezy (payments, Merchant of Record) — Handles subscription billing, invoices, and tax compliance. Lemon Squeezy Privacy Policy
Resend (transactional email) — Sends magic link and notification emails. Resend Privacy Policy

4. AI-generated content

All survey responses are generated by AI language models. They are simulated opinions from AI personas, not real human responses. neverboringnow does not represent AI-generated responses as human opinions. Results should be used for directional insight, not as definitive market research.

5. Data retention

Account data — Retained while your account is active. Permanently deleted immediately when you delete your account through your account settings.
Survey data — Retained for 12 months after creation, then automatically deleted unless you request earlier deletion.
Waitlist emails — Retained until the service launches or you request removal.
Usage logs — Retained for 90 days for operational purposes.

6. Cookies

We use two types of cookies:

Essential cookies — Authentication session cookies managed by Supabase. Required for the Service to function. No consent needed.
Analytics cookies — Google Analytics cookies (_ga, _gid) to understand how the Service is used. Only set with your explicit consent. You can accept or decline analytics cookies via the cookie banner. You can change your preference at any time by clearing your browser cookies.

We do not use advertising, retargeting, or third-party tracking cookies.

7. Your rights

Depending on your location, you may have the following rights:

All users

Access a copy of your personal data
Request correction of inaccurate data
Request deletion of your account and data
Unsubscribe from marketing communications

EU/EEA residents (GDPR)

Right to data portability
Right to restrict processing
Right to object to processing
Right to lodge a complaint with a supervisory authority

Our legal basis for processing: consent (for marketing emails), contract performance (for providing the service), and legitimate interest (for service improvement and security).

California residents (CCPA)

Right to know what personal information is collected
Right to delete personal information
Right to opt out of the sale of personal information — we do not sell your data
Right to non-discrimination for exercising your rights

8. Children's privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

9. International data transfers

Your data may be transferred to and processed in the United States, where our service providers (Supabase, OpenAI, Cloudflare) operate. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries, data requests, or complaints, contact us at hello@neverboringnow.com.