Privacy Policy

Suggency LLC, Boca Raton, Florida, USA, is responsible for the processing described here. For any privacy request, contact privacy@suggency.com.

Account data (Suggestors): email, username, display name, and any profile details you provide, used to operate your account.

Payout data: handled by Stripe as our payment processor; we store payout status and account references, not full financial details.

Visitor analytics (Passers): we do NOT use tracking cookies. Each pass is counted using a daily-rotating, non-reversible hash of coarse signals (IP + user-agent) that we cannot tie back to a person. Raw IP addresses are not stored. This is a privacy-by-design measurement approach with no cross-site tracking.

Safety data: target URLs are checked against Google Web Risk and resolved for redirect chains.

To operate Smart Bridges, protect Passers from harmful links, compute scores, pay Suggestors, prevent fraud, and meet legal obligations.

We do not sell your personal information and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA and the Florida Digital Bill of Rights.

We share data only with processors that run the service: Supabase (authentication, database, and file storage), Stripe (payments and payouts), Resend (transactional email), Google Web Risk (URL safety), Google Cloud Translation (translating the text you write on a Smart Bridge so viewers can read it in their language), Groq (an AI model that reviews the pages you submit for policy violations), Sentry (server-side error monitoring), DiceBear (generates the drawn placeholder avatar from your username when you have not uploaded a photo — your browser requests this image directly, so your IP address and username reach it), Google (favicon images for the sites you link to; in the app these are fetched by our server, but inside an embedded Smart Bridge widget your browser requests them directly), your browser vendor's push service (Google, Mozilla, or Apple — they deliver push notifications you opted into), and our hosting providers Vercel and Railway.

Pass events, which contain no directly identifying data, are kept for up to 24 months; aggregated statistics are kept indefinitely. Account data is kept while your account is active.

If you delete your account, your personal data is deleted and your Bridges are anonymised and archived (the “never break links” rule applies to content, not to your identity).

Depending on your state of residence, you may have the right to access the personal information we hold about you, to correct it, to delete it, and to opt out of any sale or sharing (we do neither). Florida residents have these rights under the Florida Digital Bill of Rights; California residents under the CCPA/CPRA.

To exercise any right, contact privacy@suggency.com. We will not discriminate against you for exercising your privacy rights, and you may appeal a decision by replying to our response.

Suggency is not directed to children under 13, and we do not knowingly collect their personal information (COPPA). If you believe a child has provided us data, contact us and we will delete it.

We protect data with encryption in transit, access controls, and least-privilege service accounts. Data is processed in the United States and other regions where our processors operate.