← Back to Hotkey Haven

Privacy Policy

Last updated: February 21, 2026

1. Information We Collect

When you use Hotkey Haven, we collect the following information:

• Account information: Email address, name, and authentication credentials (managed by Supabase Auth)
• Macro data: The macros, keyboard mappings, and device profiles you create within the application
• Usage data: Credit consumption, feature usage, and basic analytics to improve the Service
• Payment information: Processed securely by Stripe. We do not store your credit card details.

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To process payments and manage your account
• To send transactional emails (account confirmations, share notifications, credit receipts)
• To respond to support requests

3. Third-Party Services

We use the following third-party services to operate Hotkey Haven:

Service	Purpose	Data Shared
Supabase	Authentication and database	Email, account data, macros
Stripe	Payment processing	Email, payment details
Resend	Transactional email	Email address
Anthropic (Claude)	AI macro generation	Macro prompts (no personal data)
Vercel	Hosting	Standard server logs

4. Cookies and Local Storage

We use browser local storage to maintain your authentication session and remember your preferences (such as last-used login method). We do not use third-party tracking cookies. Supabase Auth uses secure cookies for session management.

5. Data Retention

Your account data and macros are retained as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Some data may be retained in backups for up to 90 days.

6. Data Security

We use industry-standard security measures including encrypted connections (TLS), secure authentication via Supabase, and role-based access controls. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Export your macro data at any time through the application
• Opt-out: Unsubscribe from non-essential emails

8. GDPR (European Users)

If you are in the European Economic Area, our legal basis for processing your data is: (a) performance of our contract with you (providing the Service), (b) your consent (where applicable), and (c) our legitimate interests in operating and improving the Service. You may contact us to exercise your GDPR rights.

9. CCPA (California Users)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell your personal information.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice.

12. Contact

For privacy-related questions or to exercise your rights, contact us at joseph@willisworxs.com.