Privacy Policy
How Colour Curver handles personal information. Last updated: 30 October 2026.
Who we are
Colour Curver is operated by Ruben Rekker, an individual based in Australia. For privacy questions, requests or complaints, contact privacy@colourcurver.com.
What we collect and why
We collect information you provide when you create an account, save palettes, invite collaborators, contact us or connect another tool. This includes your email address, profile and preferences, palette content, sharing settings, memberships, invitation details and correspondence. Supabase manages authentication credentials. An invitation may give us your email address before you join.
We also receive technical information when you use the service, such as IP addresses, browser and device details, request times, security logs and feature usage. We use this information to run and protect the service, save and recover work, manage access, deliver requested integrations and emails, respond to requests and meet legal obligations.
Billing is currently disabled. If enabled, Stripe will process payments and subscriptions. Necessary historical billing and entitlement records may remain.
Cookies and optional analytics
Essential cookies and browser storage support sign-in, security, preferences, abuse prevention and draft recovery. The editor can keep palette documents and unsynchronised work on your device. Clearing browser storage may sign you out or remove recoverable work.
Optional Google Analytics and PostHog start only after you allow them in Privacy choices. Declining does not limit the product. You can change your choice in the footer or on this page. The choice lasts up to 180 days in this browser; we honour Global Privacy Control and Do Not Track signals. If storage is blocked, a choice may last only for the current page.
Permitted analytics describe visits, scrolling on public pages and feature use, with technical browser information. PostHog can link events to your internal account ID. We filter application events to exclude palette content, names, seeds and message text, and omit queries and fragments from application page views. Session recording and advertising features are off.
Withdrawing stops future application analytics and attempts to clear accessible analytics identifiers. It does not erase information already sent. Contact us to request a review of that information.
Palette learning
Palette learning has separate controls in Account → Profile. Public learning is on by default where no preference exists and covers eligible future publications and published revisions of personal palettes. Existing opt-outs are preserved; earlier publications are not backfilled. Private learning is off unless you opt in, and covers eligible future private saves and committed edits. Team-owned palettes are excluded.
We use coarse colour features to evaluate and improve Colour Curver's colour generation and suggestions. Learning records exclude exact colours, palette documents, names, descriptions and seeds. Account and revision references support eligibility and deletion, so the records are not anonymous. We do not sell learning data or use it for external model-provider training or unrelated purposes.
Contributions expire from eligibility within 90 days. Turning a setting off stops collection and future use of its contributions, with physical removal during cleanup. You can also delete all contributions. Account deletion purges the active learning data; backups have separate limits. The current system prepares evaluation data and does not automatically change the live generator.
Sharing and connected assistants
Public palettes and displayed author or team identities can be seen, indexed, copied or exported by others. Private links and passwords allow their recipients to access shared palettes. Collaborators and administrators see information needed to manage shared work. Removing access or content does not retrieve other people's copies or necessarily remove team-owned work.
Design tools and connected assistants receive information needed for operations you authorise, including private palette content you can access. Assistant providers, such as OpenAI for Codex and Anthropic for Claude, handle information sent to them under their own terms and your account's privacy controls. Revoking a connection stops later authorised access; it does not delete earlier exports or assistant conversation history.
Website previews
A requested cached preview sends the public page URL and dimensions to a disposable Railway environment in Singapore. It retrieves page content without your Colour Curver login credentials or personal browser profile. The source website and its resource hosts receive those requests.
Captured content is temporary and scheduled for deletion after download, cancellation, failure or expiry. Cleanup failures can delay deletion; new captures are blocked when cleanup health is stale. Ownership and job metadata remain for up to 24 hours after confirmed cleanup, and content-free usage aggregates for up to 90 days. The downloaded preview remains in your browser until refresh, navigation, sign-out or closure.
Providers and overseas processing
We use Supabase for authentication and core data in Mumbai, India; Vercel and Railway for main website and collaboration services in the United States; and Railway for previews in Singapore. Resend sends authentication email from Tokyo, Japan, and stores customer data in the United States. The linked Upstash rate-limit database has its primary region in Sydney, Australia.
Optional analytics use Google Analytics and PostHog's European service in Frankfurt, Germany. Stripe supports billing when enabled. Google, other providers and their subprocessors may handle information in additional countries; a primary region does not establish where every copy is held.
We share information needed for these services, and may disclose information to meet legal obligations, protect rights or safety, obtain professional advice or transfer the business. Contact us for provider and location information relevant to your data.
Retention and security
We retain information while needed for the service, security, recovery, accountability, disputes or legal obligations. Palettes in Trash become eligible for permanent removal after 30 days; authorised users can delete them earlier. Account deletion removes authentication access, but some billing, invitation, security, audit and recovery records can remain.
Supabase provides seven daily database backups. Separate encrypted database and Redis recovery exports, and some durable application records, currently have no automatic expiry or fixed maximum age. These copies need a separate deletion review and are not covered by the seven-day backup window.
Google is configured for two-month user and event retention without activity resets; aggregate reports can have different lifecycles. PostHog's one-year query window is not a physical-deletion deadline. Resend's Free plan retains email and log data for 30 days, with separate backup and account-record lifecycles. Browser consent expiry does not erase provider history.
We use access controls, protected sessions and encrypted recovery exports to help protect information. No service can guarantee perfect security. We assess privacy incidents and make notifications required by applicable law.
Your requests and complaints
Email privacy@colourcurver.com to request access, correction or a deletion review, or to make a complaint. No special form is needed and there is no charge to submit a request. We may verify your identity proportionately and consider other people's privacy and legal retention requirements. Please do not send passwords or identity documents unless we agree on a secure process.
We aim to respond within 30 calendar days. If we need longer, or cannot fulfil a request, we will explain the expected timing or outcome and reasons, subject to legal restrictions.
The operator investigates privacy complaints. If you are dissatisfied or have not received a response within 30 days, you can contact the Office of the Australian Information Commissioner, which handles complaints within its jurisdiction. You may also complain to your local privacy regulator where applicable. This policy does not limit rights under applicable law.
Children
The service is not intended for children under 13; our Terms require users to be at least 13. We do not routinely verify age. Contact us if you believe a child under 13 has provided information so we can review appropriate removal or protection.
Changes
We update this policy when our practices or obligations change. A policy update does not grant permission for optional analytics or private palette learning; we request a new choice where required.