Privacy Policy

1. Introduction

Indie Command Center ("we," "us," or "our") is a productivity platform built for indie hackers and solo developers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application. Please read this policy carefully. By accessing or using the Service, you agree to the terms outlined below.

2. Information We Collect

We collect the following categories of information:

• Account information — When you sign in with GitHub, we receive your name, email address, and GitHub profile picture from your GitHub account via OAuth.
• User-generated content — Projects, tasks, ideas, resources, and progress entries you create within the application.
• Usage data — Basic analytics such as page views and feature usage to improve the Service.

We do not collect passwords. Authentication is handled entirely through GitHub OAuth.

3. How We Use Your Information

• To provide, operate, and maintain the Service.
• To personalize your experience and display your projects, tasks, and progress.
• To communicate with you regarding account-related matters (e.g., password resets, security alerts).
• To improve the Service based on aggregated, anonymized usage patterns.
• To comply with legal obligations.

4. Data Storage & Infrastructure

Your data is stored in a Neon managed PostgreSQL database. The application is hosted on Vercel. Both providers employ industry-standard security measures including encryption at rest and in transit, and are SOC 2 compliant. Your data may be processed and stored in the United States or other regions where our infrastructure providers operate.

5. Data Sharing & Third Parties

We do not sell your personal data. We may share information with:

• GitHub — For authentication purposes via OAuth.
• Neon (Database) — To store and retrieve your application data.
• Vercel (Hosting) — To serve the application and process requests.
• Law enforcement — Only when required by applicable law or valid legal process.

6. Cookies & Tracking

We use essential cookies required for authentication (NextAuth.js session cookies). We do not use advertising cookies or third-party tracking pixels. Session cookies are strictly necessary for the Service to function and expire when your session ends or after the configured session duration.

7. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove all your personal data and user-generated content within 30 days of the request, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Export your data in a portable format.

To exercise any of these rights, contact us at mradhanpura56@gmail.com.

9. Security

We implement industry-standard security measures including HTTPS encryption, security headers (CSP, HSTS, X-Frame-Options), and secure session management. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at mradhanpura56@gmail.com.