Privacy Policy

1. Who we are

Ecqo is a Chrome browser extension developed by Luminode Limited, based in Nairobi, Kenya. You can contact us at luminodelimited@gmail.com.

2. Data we collect

We collect only the information necessary to provide our service:

Account data: your email address and (optionally) your name when you create an account or complete a purchase.
Payment data: payment and billing information is collected and processed by Paddle (our payment processor). We never store your card details.
License key: a unique key generated when your subscription is activated, stored against your email.
Usage data: basic server logs (IP address, timestamps) for security and debugging.
Anonymous feature analytics: the extension sends anonymous, aggregate events when you use certain features (e.g. saving a workspace, shortening a link, replying to an email) so we can see which features are used and improve the product. Each event is tied to a randomly generated per-install identifier, not to your email, account, or any personal information — we cannot use this data to identify you individually. We do not track your browsing history or the content of your tabs, emails, or notes.

3. How we use your data

To create and manage your Ecqo account and subscription
To generate and deliver your license key via email
To validate your license key when the extension calls our API
To send transactional emails (license key, billing receipts) — no marketing emails without your explicit opt-in
To investigate and resolve support requests

4. Third-party services

We share your data only with the services required to operate Ecqo:

Paddle — payment processing and subscription management. Paddle acts as the Merchant of Record and handles all VAT / tax compliance. Paddle's privacy policy: paddle.com/legal/privacy.
Supabase — database and authentication hosting (servers in EU-West). Supabase's privacy policy: supabase.com/privacy.
Resend — transactional email delivery. Resend's privacy policy: resend.com/legal/privacy-policy.
Google APIs — the Ecqo extension uses Google OAuth to access your Gmail data (read, compose, and archive messages). This data is processed locally in your browser and is never stored on our servers.
Vercel — website hosting. Vercel's privacy policy: vercel.com/legal/privacy-policy.
Google Analytics — aggregate website traffic analytics. Google's privacy policy: policies.google.com/privacy.

5. Cookies & analytics

We use session cookies to keep you logged in to your dashboard. We also use Google Analytics to understand aggregate site traffic (e.g. which pages are visited and how many people install Ecqo). Google Analytics may set analytics cookies (such as _ga) in your browser. Separately, the Ecqo extension sends anonymous feature-usage events (see Section 2) tied to a random per-install identifier, not to cookies or your account. We do not use advertising cookies or sell your data. See Google's privacy policy for details: policies.google.com/privacy.

6. Data retention

We retain your account data for as long as your subscription is active. After cancellation, we retain your data for 90 days to allow for reactivation or dispute resolution, then we delete it.

7. Your rights

You have the right to:

Access the data we hold about you
Correct inaccurate data
Delete your account and associated data
Export your data in a portable format

To exercise any of these rights, email us at luminodelimited@gmail.com.

8. Security

We use industry-standard measures to protect your data including TLS encryption in transit, encrypted storage, and access controls. No system is 100% secure; please use a strong password and keep your license key private.

9. Governing law

This Privacy Policy is governed by the laws of Kenya. Any disputes will be resolved in Kenyan courts.

10. Changes

We may update this policy from time to time. Material changes will be communicated by email. Continued use of Ecqo after changes take effect constitutes acceptance.

11. Contact

Questions about this policy? Email us: luminodelimited@gmail.com