Privacy Policy
Last updated:
This policy explains what personal data Beanoc collects when you use beanoc.com and the app.beanoc.com workspace, why we collect it, and the rights you have over it.
Who we are
Beanoc ("Beanoc", "we", "us") operates the AI marketing workspace at app.beanoc.com and the marketing site at beanoc.com. Beanoc is operated by [Legal entity name, e.g. "Beanoc, Inc."] (registered address: [registered business address — placeholder]). For any privacy question, contact privacy@beanoc.com.
Data we collect
We collect the following categories of data:
- Account data: name, email address, password/authentication tokens, and email verification codes, stored via our authentication provider, Supabase.
- Brand-voice profile: tone-of-voice details you save so tools can apply it to your generations.
- Tool inputs and briefs: the information you type into a tool's brief fields.
- AI outputs and generation history: the drafts produced for you, plus which tools you ran and when, and any items you mark as favorites.
- Billing data: subscription plan, status and invoice records. Card numbers are never sent to or stored on Beanoc's servers — Stripe handles and stores payment details directly.
- Technical data: basic request metadata needed to operate the service securely (e.g. timestamps, error logs).
We do not run analytics, advertising pixels or trackers of any kind on beanoc.com or app.beanoc.com. The only third-party tag on our pages is a Google Search Console verification meta tag, which does not track visitors.
Purposes and legal basis
Under the EU/UK GDPR, we rely on the following legal bases (Article 6):
- Contract (Art. 6(1)(b)): creating your account, running AI generations, processing subscription payments and providing support.
- Legitimate interests (Art. 6(1)(f)): keeping the service secure, preventing abuse, and improving reliability.
- Consent (Art. 6(1)(a)): where we ask for it specifically (for example, optional communications), which you can withdraw at any time.
- Legal obligation (Art. 6(1)(c)): retaining billing records for tax and accounting purposes.
Subprocessors
We use the following subprocessors to operate Beanoc. None of them are permitted to use your content for their own purposes or to train their own general-purpose models on it.
| Subprocessor | Purpose | Data involved | Region note |
|---|---|---|---|
| Supabase (via Lovable Cloud) | Authentication, database and file storage | Account, brand-voice, briefs, outputs, history, subscription records | Region depends on project configuration — [confirm hosting region] |
| Stripe | Payment processing and billing | Customer, subscription and invoice data; card details | US-based global provider; Standard Contractual Clauses apply for EEA/UK transfers |
| Resend | Transactional email delivery (from noreply@mail.beanoc.com) | Email address, message content (e.g. verification codes) | US-based provider; SCCs apply for EEA/UK transfers |
| OpenAI | AI text generation (server-side API calls) | Your brief text and saved brand-voice profile, sent per request | US-based provider; SCCs apply for EEA/UK transfers |
| Lovable / Cloudflare | Application hosting and edge CDN | All traffic to beanoc.com and app.beanoc.com | Global edge network; SCCs apply where relevant |
We will update this table before adding or replacing a subprocessor with one that materially changes how your data is handled.
Retention
We keep account, brand-voice, brief, output and history data for as long as your account is active, so you can find and reuse past work. Billing records are retained as required for tax and accounting purposes. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain records to meet a legal obligation.
International transfers
Some of our subprocessors (Stripe, Resend, OpenAI, and parts of the Lovable/Cloudflare network) are based in or process data in the United States. Where personal data originating in the EEA, UK or Switzerland is transferred to such countries, we rely on the providers' Standard Contractual Clauses (SCCs) and equivalent safeguards as their transfer mechanism.
Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten");
- Receive a portable copy of your data;
- Restrict or object to certain processing;
- Withdraw consent at any time, where processing is based on consent; and
- Lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, email privacy@beanoc.com. We will respond within the timeframe required by applicable law.
Children
Beanoc is not directed at, and may not be used by, anyone under 16 years old.
Security
We apply row-level security policies in our database so that each account can only read its own data, enforce plan and quota checks server-side, and never expose provider API keys to the browser. Data is encrypted in transit (TLS) and at rest by our infrastructure providers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date (2026-02-01) at the top of this page.
Contact
Questions about this policy or your data: privacy@beanoc.com. General support: support@beanoc.com.