Privacy Policy

Information We Collect

• Account information: email address, username, display name, bio, avatar, website, GitHub, and Twitter links
• User content: submitted products, images, tags, comments, replies, votes, saved collections, and follow relationships
• Authentication and session data: session cookies and authentication state managed by Supabase Auth
• Operational logs: request paths, error events, browser failure events, and technical data such as IP address and user agent needed for security and incident response
• Support information: contact details and message content when you contact us

How We Use Information

• To provide account, login, profile, submission, comment, vote, and save features
• To detect and prevent spam, vote manipulation, malicious uploads, and unauthorized access
• To understand service quality, errors, performance, and public community activity
• To respond to important account, security, privacy, and support requests

Public Information

Product submissions, public profiles, comments, vote counts, save counts, tags, and categories may be visible in the service. In the first-launch MVP, individual vote history and saved collections are not exposed on public profiles. We do not expose passwords, sessions, tokens, or raw log payloads, and we redact sensitive fields in operational logs.

Processors and Sharing

NicheNext may use providers needed to run the service, including Supabase for Auth, Postgres, and Storage, hosting providers, and logging or observability tools. In the first launch MVP, we do not sell personal information, provide it to third-party ad networks, or share it for behavioral advertising.

Retention and Deletion

Accounts and public content are retained while you use the service. If you request account deletion or data access, we will process it within a reasonable period except where limited retention is needed for operations, security, or legal reasons. Backups, caches, and aggregate metrics may take longer to reflect deletion.

Cookies and Local Storage

NicheNext uses cookies and storage needed for login sessions and security. The first launch MVP does not use third-party advertising cookies.

Security

NicheNext applies technical safeguards such as RLS, authenticated sessions, input validation, security headers, structured log redaction, and upload limits. No internet service can guarantee perfect security.

Children

NicheNext is not directed to children under 13. Contact us if you believe a child has provided personal information.

Contact and Requests

For access, correction, deletion, or other privacy requests, contact privacy@nichenext.com. You can also edit profile information from the settings screen.

Changes

When this policy changes, we will update the date on this page and provide more prominent notice for material changes.