Privacy Policy

1. Introduction

Terradium ("we," "us," or "our"), operating as StaticKit, operates the statickit.app website and platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Account Information

When you sign up for StaticKit using Google OAuth, we collect:

• Your name
• Your email address
• Your profile image (provided by Google)

2.2 Content Data

We store the content you create through our Service, including:

• Blog posts and their associated metadata
• Site configurations and settings
• Images and media you upload
• Published static site files

2.3 Usage Data

We may automatically collect certain information when you access our Service, including:

• Browser type, version, and language preferences
• Pages visited and features used within the Service
• Date, time, and duration of your visits
• Referring URLs and navigation paths

2.4 Payment Information

Payment processing is handled entirely by Paddle, our merchant of record. We do not directly collect, store, or process your credit card numbers or banking information. Paddle may share limited transaction information with us (such as subscription status and billing dates) to manage your account.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate your identity and manage your account
• Build, deploy, and host your static blog sites
• Process your subscription and manage billing
• Communicate with you about your account, updates, and support requests
• Monitor and analyze usage trends to improve the Service
• Detect, prevent, and address technical issues and security threats

4. Third-Party Service Providers

We share your information with the following third-party providers as necessary to deliver our Service:

• Google: Authentication provider. When you sign in with Google OAuth, Google processes your authentication data according to their privacy policy.
• Paddle: Payment processing and subscription management. Paddle acts as our merchant of record and handles all payment data in accordance with their privacy policy.
• Cloudflare: Static site hosting and content delivery via Cloudflare R2 and their global CDN. Your published site content is stored on and served through Cloudflare infrastructure.
• Neon: Database hosting provider. Your account data, site configurations, and post content are stored in our Neon-hosted PostgreSQL database.

These providers have their own privacy policies governing their use of your data. We encourage you to review their policies.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data in transit
• Encrypted database connections
• Secure authentication via Google OAuth
• Regular security reviews of our infrastructure and codebase

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking

StaticKit uses only essential cookies required for the Service to function:

• Session cookies: To maintain your authenticated session after signing in
• CSRF tokens: To protect against cross-site request forgery attacks

We do not use advertising cookies, third-party tracking cookies, or analytics cookies that track you across other websites.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data and account
• Export: Request an export of your content and data in a portable format
• Restriction: Request restriction of processing of your personal data
• Objection: Object to processing of your personal data for certain purposes

To exercise any of these rights, please contact us at info@statickit.io.

8. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract performance: Processing necessary to provide the Service you have subscribed to
• Legitimate interest: Processing necessary for our legitimate business interests, such as improving the Service and ensuring security
• Consent: Where you have given explicit consent for specific processing activities

You have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.

9. CCPA Compliance (California Users)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information held by us
• The right to opt-out of sale of personal information
• The right to non-discrimination for exercising your CCPA rights

We do not sell your personal information to third parties. To exercise your CCPA rights, contact us at info@statickit.io.

10. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete your personal data and content within 30 days, except where we are required to retain data by law or for legitimate business purposes (such as resolving disputes or enforcing our agreements).

11. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us at info@statickit.io and we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at info@statickit.io.