Privacy Policy — Cerrar

Cerrar ("we," "us," or "our") operates the website cerrar.me and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Account Information

Name and email address (provided during registration or via Google OAuth)
Profile information such as business niche and booking URL

Conversation Data

Chat transcripts between AI interviewers and your leads
Lead qualification scores, summaries, and AI-generated insights
Lead contact information (name, email, phone) provided during conversations

Payment Information

Billing details are processed by Stripe. We do not store credit card numbers on our servers. We retain your Stripe customer ID and subscription status.

Usage Data

IP address, browser type, operating system
Pages visited, features used, and timestamps
Cookies and similar technologies for authentication and analytics

2. How We Use Your Information

Provide, maintain, and improve the Service
Authenticate your identity and manage your account
Process payments and manage subscriptions
Generate AI-powered lead qualification, scoring, and pre-call briefs
Send transactional emails (lead notifications, account updates)
Detect and prevent abuse, fraud, and security incidents
Comply with legal obligations

3. Data Storage & Security

Your data is stored in a PostgreSQL database hosted by Supabase in the AWS us-west-2 (Oregon) region. We use encrypted connections (TLS) for all data in transit and follow industry-standard practices for data at rest.

While we implement reasonable safeguards, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

4. Cookies

We use essential cookies to manage authentication sessions via Supabase Auth. These cookies are strictly necessary for the Service to function and cannot be disabled. We do not use advertising or tracking cookies.

5. Third-Party Services

We share data with the following third-party services as necessary to operate:

Supabase — authentication and database hosting
Stripe — payment processing
Google (Gemini API) — AI conversation generation
Anthropic (Claude API) — AI conversation generation (fallback)
Resend — transactional email delivery
Vercel — application hosting and edge functions

Each third-party service operates under its own privacy policy.

6. Data Retention

We retain your account data and conversation data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction or deletion of your data
Object to or restrict processing of your data
Data portability (receive your data in a structured format)
Withdraw consent at any time

To exercise any of these rights, contact us at carter@cerrar.me.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact

If you have questions about this Privacy Policy, please contact us at: carter@cerrar.me