Privacy Policy

1. Introduction

RedditComment.com ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and Chrome extension (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Data Controller

For the purposes of the General Data Protection Regulation (GDPR), the data controller is RedditComment.com. For privacy inquiries, please contact us at: privacy@redditcomment.com

3. Information We Collect

3.1 Personal Information You Provide

We collect information that you voluntarily provide when using our Service:

• Account Information: Email address, name (optional), and password (encrypted)
• Payment Information: Processed securely through Stripe (we do NOT store credit card details)
• OAuth Information: If you use Google Sign-In, we receive your email and name from Google

3.2 Information Collected Automatically

• Usage Data: Reddit post URLs you request inspiration for, generated comment history, credit usage
• Log Data: IP address, browser type, device information, access times, pages viewed
• Cookies: Authentication tokens, session management (see Section 7)

3.3 Reddit Content Processing

When you request comment inspiration, we temporarily process:

• Reddit post title, content, and URL
• Top comments from the Reddit post (for context)
• Subreddit name

⚠️ IMPORTANT: We cache this content for 24 hours ONLY for regeneration purposes. After 24 hours, all Reddit content is permanently deleted. We do NOT store your Reddit username, password, or credentials.

4. How We Use Your Information

We use collected information for the following purposes:

• Service Provision: To provide AI-powered comment inspiration and manage your account
• Payment Processing: To process payments and manage subscriptions via Stripe
• Communication: To send service updates, account notifications, and respond to inquiries
• Improvement: To analyze usage patterns and improve our Service
• Security: To detect fraud, abuse, and security threats
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

We do NOT use your data for advertising, profiling, or any purpose other than providing the Service.

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process your personal data based on:

• Contractual Necessity: Processing is necessary to provide the Service you requested
• Legitimate Interests: For fraud prevention, security, and service improvement
• Consent: For cookies and analytics (you can withdraw consent anytime)
• Legal Obligations: To comply with applicable laws and regulations

6. Third-Party Service Providers

We share information with trusted third-party providers ONLY as necessary to operate the Service:

⚠️ We do NOT sell, rent, or share your personal data with any third parties for their marketing purposes. EVER.

7. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Authentication, session management (required for Service functionality)
• Analytics: Google Analytics for usage statistics (anonymized)

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

8. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmission uses TLS/SSL encryption
• Password Protection: Passwords are hashed using bcrypt (never stored in plain text)
• Access Control: Strict access controls and authentication requirements
• Infrastructure Security: Regular security audits and updates
• Data Minimization: We collect only the minimum data necessary

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

9. Data Retention

• Account Data: Retained until you delete your account
• Generated Comments: Stored in your history until you delete them or your account
• Reddit Post Content: Cached for 24 hours only, then permanently deleted
• Payment Records: Retained for 7 years (legal requirement for tax/accounting purposes)
• Logs: Retained for 90 days for security and debugging purposes

After account deletion, we permanently delete all personal data within 30 days, except where legal obligations require retention (e.g., payment records for tax compliance).

10. Your Privacy Rights

10.1 GDPR Rights (EEA/UK Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing anytime
• Right to Lodge a Complaint: File a complaint with your local supervisory authority

10.2 CCPA Rights (California Residents)

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do NOT sell personal information (nothing to opt-out of)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

10.3 How to Exercise Your Rights

To exercise any of these rights, email us at: privacy@redditcomment.com
We will respond to your request within 30 days (or as required by applicable law).

11. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including the United States. These countries may have different data protection laws than your country.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequate security measures and encryption
• Compliance with GDPR requirements for cross-border transfers

12. Children's Privacy

Our Service is NOT intended for children under 13 years of age (or 16 in the EEA).

We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information immediately.

13. Do Not Track Signals

We do not currently respond to Do Not Track (DNT) signals. We do not track users across third-party websites.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page with an updated "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us:

16. Consent

By using our Service, you consent to this Privacy Policy and agree to its terms.