Privacy Policy
Effective Date: May 23, 2025
1. Introduction
OtaHub ("we", "us", "our") is operated by Gayan, an individual developer based in Sri Lanka. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service at otahub.dev (the "Service").
2. Information We Collect
We collect the following types of information: • Account Information: Your email address and authentication credentials (via Supabase Authentication). • Profile Information: Your subscription plan and account status stored in our database. • Usage Data: Device MAC addresses, firmware versions, ping timestamps, and project metadata you create through the Service. • Firmware Files: Binary (.bin) files you upload are stored in Cloudflare R2. • Payment Information: Billing details are handled entirely by Paddle. We never store your card number or sensitive payment data directly.
3. How We Use Your Information
We use collected information to: • Provide, maintain, and improve the Service • Manage your account and subscription • Process payments through Paddle • Send transactional emails (account verification, password reset) • Monitor for abuse or violations of our Terms of Service • Respond to your support requests
4. Third-Party Services
We use the following third-party services that may process your data: • Supabase: Authentication and Database • Cloudflare: File storage • Paddle: Payment processing and subscription management. Subject to Paddle's Privacy Policy.
5. Data Retention
We retain your account data for as long as your account is active. Firmware files are retained until you delete them or your account is terminated. If you cancel your subscription, your data is retained for a reasonable grace period before deletion.
6. Cookies
We use minimal session cookies required for Supabase Authentication to function. We do not use tracking, advertising, or analytics cookies.
7. Data Security
All data is transmitted over HTTPS. Firmware files are stored in Cloudflare R2 with server-side encryption. API keys are generated with cryptographic randomness and are scoped per-project. However, no system is 100% secure and we cannot guarantee absolute security.
8. Your Rights
You have the right to: • Access the personal data we hold about you • Request correction of inaccurate data • Request deletion of your account and associated data • Export your firmware files at any time from the dashboard To exercise these rights, contact us at the email below.
9. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice in the Service. Continued use after changes constitutes acceptance.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact: Gayan Email: [email protected]