Privacy Policy

This Privacy Policy explains how SocketBase handles personal information when you visit the website, run a public growth check, create an account, connect growth signals, subscribe to a paid plan, or receive emails from us.

SocketBase is built for founders and teams that want to understand whether their app is being found, used, and paid for. That means we process product, website, analytics, billing, and account data to provide the service.

Account and sign-in data: email address, name when provided by Google or GitHub, authentication session identifiers, OAuth state cookies, and workspace membership details.

Workspace and site data: workspace names, site URLs, domains, audit results, recommendations, source connection status, timeline events, tracked product events, and weekly summary settings.

Billing data: plan selection, Stripe customer and subscription identifiers, payment status, current period information, and billing portal state. Card details are handled by Stripe and are not stored by SocketBase.

Email data: recipients, delivery status, message identifiers, subscription preference links, and operational email events needed for magic links and weekly summaries. Email sending is handled through Resend.

Technical and device data: IP-derived request context, user agent, page URL, referrer, response timing, cookies, local storage identifiers, and consent preferences where applicable.

We use information to provide growth checks, create reports, maintain workspaces, authenticate users, process paid subscriptions, send operational emails, generate weekly summaries, protect the service, debug issues, and improve product reliability.

If you install the SocketBase tracking script on your own site, the events you send are used to help your workspace understand activation, conversion, and retention signals for that site.

We do not sell personal information. We also do not use customer workspace data to build third-party advertising profiles.

SocketBase uses service providers to run the product: Vercel for hosting and scheduled jobs, Supabase Postgres for database services, Stripe for billing, Resend for email delivery, Google and GitHub for optional OAuth sign-in, and Plausible for connected analytics where configured.

These providers process information only as needed to provide their services to SocketBase and our customers.

Necessary cookies support account sign-in, OAuth security, and cookie consent storage. Optional analytics storage is used only after consent where the SocketBase website deploys analytics.

The customer-installed SocketBase tracking script should be used in line with the site owner's own privacy and cookie obligations. See the Cookie Policy for current categories and controls.

We keep account and workspace information while the account is active or as needed to provide the service. Authentication tokens expire automatically. Magic-link tokens expire quickly and are stored only as hashes.

Billing, audit, delivery, and security records may be retained where needed for accounting, dispute handling, fraud prevention, service reliability, and legal compliance.

You can manage cookie preferences from the Cookie Policy page or the footer controls. You can unsubscribe from weekly summary emails through signed preference links.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. Contact us to make a request.

SocketBase uses HTTP-only authentication cookies, hashed session and magic-link tokens, server-side provider secrets, access checks for workspace actions, and least-necessary provider data handling.

No internet service can guarantee perfect security. If you believe data or credentials connected to SocketBase may be at risk, contact us promptly.

For privacy requests or questions, contact privacy@socketbase.com. For support requests, contact support@socketbase.com.