At TooSimple.io ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our testimonial collection and display service.
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Password (securely hashed using bcrypt)
- Account preferences and settings
Testimonial Data
When testimonials are submitted through your collection forms, we collect:
- Submitter's name and email address
- Company name and job title (optional)
- Testimonial text content (20-2,000 characters)
- Star rating (1-5)
- Video recordings (up to 90 seconds, max 500MB before compression)
- Profile photos (optional, max 5MB)
Usage Data
We automatically collect certain information about how you interact with our service, including page views, feature usage, and general analytics data. This data does not include personally identifiable information.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process your account registration and manage your subscription
- Store and display testimonials on your behalf
- Compress and optimize video content for efficient delivery
- Send transactional emails (account confirmations, password resets)
- Respond to your support inquiries
- Analyze usage patterns to improve user experience
- Detect and prevent fraudulent or abusive activity
- Comply with legal obligations
3. Data Storage & Security
Where Your Data Is Stored
- Database: Account and testimonial metadata is stored in Supabase PostgreSQL databases
- Video Storage: Video files are stored on Cloudflare R2, a globally distributed object storage service
- Images: Profile photos and thumbnails are stored alongside videos on Cloudflare R2
Security Measures
We implement industry-standard security measures including:
- HTTPS encryption for all data in transit
- Password hashing using bcrypt with cost factor 12
- HTTP-only session cookies with SameSite protection
- Rate limiting on all public endpoints
- Security headers (HSTS, X-Frame-Options, CSP)
- Regular security audits and updates
4. Third-Party Services
We use the following third-party services to operate TooSimple.io:
Polar.sh (Payments)
Processes payments and manages subscriptions. Polar.sh acts as our Merchant of Record and handles all payment data. We never store your credit card information.
Supabase (Database)
Hosts our PostgreSQL database containing account information and testimonial metadata.
Cloudflare R2 (Storage)
Stores video files and images uploaded as part of testimonials.
OpenPanel (Analytics)
Privacy-friendly analytics to understand how users interact with our service. We do not track personally identifiable information through analytics.
Sentry (Error Tracking)
Monitors application errors to help us maintain service reliability. Error logs do not contain personally identifiable information.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services:
- Account Data: Retained until you delete your account
- Testimonials: Retained until you delete them or close your account
- Video Files: Deleted when the associated testimonial is permanently deleted
- Analytics Data: Aggregated and anonymized after 90 days
- Backup Data: Database backups are retained for up to 90 days
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Export: Request your data in a portable format
- Objection: Object to certain processing of your data
- Restriction: Request restricted processing of your data
To exercise any of these rights, please contact us at @PipolmPk on X.
8. International Data Transfers
Your data may be transferred to and processed in countries other than your own. Our service providers operate globally, and data may be stored in the United States and other regions where our infrastructure is located. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
9. Children's Privacy
TooSimple.io is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our service after any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
TooSimple.io
Contact: @PipolmPk on X (Twitter)