Privacy Policy

This policy describes what personal data Senior Loop collects, why we collect it, where it is stored, and your rights to access or delete it.

1. Data we collect

We collect the following categories of data:

• Account email. When you sign in with Google, we receive your email address from Google via Supabase Auth. We use this to identify your account and associate your reviews and entitlements with you. We do not receive your Google password or any Google profile data beyond your email.
• Review submissions.When you submit a review on a PR, we store: the PR id, the file and line number you commented on, your comment text, the score the grader assigned, and the grader's feedback. These are persisted indefinitely so you can see your review history.
• Payment metadata.When you pay, we receive from Razorpay: the payment id, amount, currency, and which tier was purchased. We do not collect or store your card details — those live with Razorpay. See Razorpay's privacy policy for how they handle payment instruments.
• Anonymous page-view analytics. We use Vercel Analytics, which counts page views without using cookies, IP-based fingerprinting, or any cross-site tracking. No personal data is collected by analytics.
• Authentication cookies. When you sign in, Supabase sets httpOnly session cookies on seniorloop.dev so we can keep you signed in. These contain only an encrypted session reference, not personal data.

2. Why we collect it

• Email: account identification, support responses, refund correspondence.
• Reviews: showing your history, computing aggregate stats (best score, streak), grading future attempts against past performance.
• Payments: granting access to paid content, tax records, refund processing.
• Analytics: understanding which pages are used so we can improve the product.

3. Where it is stored

• User accounts and reviews: our managed Postgres database, hosted in India.
• Payment records: our backend database stores only the metadata listed above. Card and bank details are held by our payment processor (RBI-regulated; see their privacy policy for handling of payment instruments).
• Grader interaction: when you submit a review, your comment text is sent to our AI grading provider (Anthropic). Their privacy policy applies to that data in transit. We do not opt into any training-data sharing.

4. Sharing with third parties

We do not sell, rent, or trade your personal data. We process your data through the following categories of service providers:

• Identity provider — handles OAuth sign-in.
• Auth and database hosting — stores user accounts and reviews.
• Payment processor — handles card transactions and refunds.
• AI grading provider — receives your comment text to compute the review score.
• Application hosting — runs the frontend, backend, and DNS.

A current list of named subprocessors is available on request — email hello@seniorloop.dev.

5. Your rights

You can:

• Access all data we hold about you — email hello@seniorloop.dev from the address tied to your account.
• Delete your account and all associated review data — same email path. Deletion is processed within 7 business days. Payment records are retained as long as required by Indian tax law (typically 7 years), but anonymized after account deletion.
• Exportyour reviews — email and we'll send a JSON dump.

6. Children

Senior Loop is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has signed up, email us and we will delete the account.

7. Changes to this policy

If we materially change what data we collect or how we use it, we will update the "Last updated" date at the top of this page and email any signed-in users. The previous version of the policy can be requested by email.

Contact

Privacy questions: hello@seniorloop.dev.