Privacy Policy

1. Data We Collect

Depending on how you use Pentio, we may collect:

• Account data: email and authentication identifiers.
• Project data: project files, animation/state-machine configuration, and related metadata needed to save and sync your work.
• Subscription data: plan, subscription status, billing cycle dates, and limited billing metadata provided by our payment provider.
• Technical data: basic logs needed for security, debugging, and abuse prevention.

2. How We Use Data

We use data to provide account access, persist and sync projects, manage subscriptions, secure the service, respond to support requests, and improve product reliability.

3. Third-Party Processors

We rely on trusted providers to operate Pentio:

• Supabase: For secure user authentication and Postgres database hosting of your projects.
• Lemon Squeezy: Merchant of Record and payment processor for paid plans. We do not store full payment card numbers.

These providers process data under their own terms and privacy policies where applicable.

4. Cookies and Session Persistence

We use essential cookies/tokens for authentication and session continuity. If you enable "Keep me signed in", session tokens may persist for up to 30 days; otherwise they are session-scoped.

We also store a small local preference flag in your browser to remember this sign-in preference. We do not use advertising retargeting cookies.

For full details, see ourCookie Policy.

5. Retention and Deletion

You can delete projects from your dashboard. You can request account deletion from Settings. After deletion request, account and related workspace data are removed from active systems, and residual backups/logs may remain for a limited period where required for security, legal, or disaster recovery purposes.

6. Data Sharing and Transfers

We do not sell your personal data. We share data only with service providers required to operate Pentio, for legal compliance, or to protect rights, security, and integrity of the service.

7. Security

We use reasonable technical and organizational safeguards to protect your data. No system is completely secure, so we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or object to certain processing of your personal data. You may exercise these rights by contacting us.

9. Policy Updates

We may update this Privacy Policy periodically. Material changes will be reflected by updating the "Last Updated" date.