Privacy Policy

Last updated: April 5, 2026

1. Who We Are

Laurels ("we", "us", "our") operates laurels.pro, a verified professional profile platform. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

We collect the following categories of data:

  • Account data: name, email address, username, and password (hashed).
  • Profile data: bio, job title, profile photo, video introduction, tech stack, project links, and social URLs you choose to add.
  • Payment data: billing name and subscription status. Full card details are processed by Stripe and never stored on our servers.
  • GitHub integration data: public repository statistics (commits, pull requests, stars, top language). We store an encrypted OAuth access token to fetch this data. We do not access private repositories.
  • Analytics data: profile views, widget loads, widget opens, link clicks, and contact form submissions — attributed to your username, not to individual visitors.
  • Technical data: IP address, browser type, and referrer URL collected when visitors view your profile or use the embed widget.

3. How We Use Your Data

We use your data to:

  • Provide and operate the Service, including displaying your public profile.
  • Verify your identity through payment card name matching.
  • Sync your GitHub statistics and display them on your profile.
  • Send transactional emails (account confirmation, password reset, contact form notifications).
  • Provide you with analytics about your profile's performance.
  • Improve the Service through aggregated, anonymised usage analysis.

We do not sell your personal data. We do not use your data for advertising.

4. Data Sharing

We share data only with the following third-party service providers, strictly for operating the Service:

  • Supabase — database and authentication hosting.
  • Stripe — payment processing and subscription management.
  • Cloudinary — image and video storage and delivery.
  • Resend — transactional email delivery.
  • Vercel — application hosting and edge infrastructure.

We do not share your data with recruiters, employers, or any third party without your explicit consent.

5. Public Profile Data

Information you add to your public profile (name, bio, projects, tech stack, social links) is visible to anyone who visits your profile URL or embeds your widget. You control what appears on your profile through the editor. You can make your profile private or delete it at any time.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data is removed from our active systems within 48 hours. Encrypted backups are purged within 30 days.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email privacy@laurels.pro. We will respond within 30 days.

8. Cookies

We use session cookies for authentication only. We do not use tracking cookies or third-party advertising cookies. The embed widget does not set cookies on the host website.

9. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have inadvertently collected such data, contact us immediately.

10. Changes to This Policy

We may update this policy periodically. We will notify you of material changes by email. Continued use of the Service after changes take effect constitutes acceptance.

11. Contact

For privacy-related questions, contact privacy@laurels.pro.