Privacy Policy

1. Who We Are

StarHQ ("we," "us," "our") operates the website at starhq.app and related services. We help businesses collect testimonials from customers and build forms to capture leads, feedback, and responses.

For questions about this policy, contact privacy@starhq.app.

2. Information We Collect

2.1 Account Information

When you sign up, we collect your name, email address, and workspace name. We use this to create and manage your account.

2.2 Testimonials and Form Responses

When your customers submit testimonials or fill out your forms via StarHQ, we collect the data they provide - name, photo, written testimonial, star rating, or any custom fields you configure. This data belongs to you. We store it on your behalf and make it accessible through your dashboard.

2.3 Usage Data

We collect standard analytics: pages visited, features used, browser type, device type, and IP address. We use this to improve the service.

2.4 Payment Information

Payment processing is handled by Stripe and Razorpay. We do not store credit card numbers or bank account details on our servers.

3. How We Use Your Information

• Provide the service: Store and display testimonials, serve your embedded widgets, deliver form submissions to your dashboard.
• Communicate with you: Send account notifications, product updates, and service alerts.
• Improve the product: Analyze usage patterns to build better features.
• Process payments: Manage your subscription and billing.

We do not sell, rent, or share your data or your customers' data with third parties for their marketing purposes.

4. Data Sharing

We share data only with service providers necessary to operate StarHQ:

• Supabase / Vercel - database and infrastructure hosting.
• Resend - transactional email delivery (account notifications).
• Anthropic (Claude AI) - to power AI features such as testimonial summarization. Only the specific text needed is sent; we do not include unnecessary personal data.
• Stripe / Razorpay - payment processing.
• Slack - if you connect Slack, we send new submission notifications to your chosen channel.

We may disclose data if required by law, court order, or to protect the rights and safety of StarHQ and its users.

5. Data Security

• All data in transit is encrypted via TLS 1.2+.
• Data at rest is encrypted by Supabase (AES-256).
• Access to production systems is restricted to authorized personnel with multi-factor authentication.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data is deleted within 30 days, except where retention is required by law.

7. Your Rights

You have the right to:

• Access - request a copy of your data.
• Correction - update inaccurate information.
• Deletion - request that we delete your account and data.
• Portability - export your testimonials and form data.
• Revoke integrations - disconnect Slack, Stripe, or any other connected service at any time from your dashboard.

To exercise any of these rights, email privacy@starhq.app.

8. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (Vercel Analytics) to understand usage. We do not use advertising or tracking cookies.

9. Children's Privacy

StarHQ is a business tool. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.