Privacy Policy

1. Introduction

CertifiedTide ("we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our website and services at CertifiedTide.com.

2. Information We Collect

We collect the following types of information:

• Account Information: Your name and email address when you register, including details provided by Google when you use Google Sign-In.
• Membership & Billing: Subscription plan, billing status, and transaction records. All payments are processed by Stripe, our payment provider. Your payment card details are entered directly into Stripe's secure checkout and are never stored on our servers.
• Protocol & Journal Data: Injection logs, vial tracking, and notes you voluntarily enter into your personal protocol diary. This data is private to your account.
• Calendar Data (Optional): Event details for protocol entries you choose to sync to your connected Google Calendar.
• Usage Data: Pages visited, features used, and device/browser information for analytics and site improvement.

3. How We Use Your Information

• To provide and maintain your account and membership.
• To process subscription payments and manage billing.
• To display your personal protocol diary and journal entries.
• To create calendar events on your connected Google Calendar when you request a sync.
• To send important account, billing, and service notifications.
• To improve our content, features, and user experience.
• To comply with legal obligations.

4. Google Sign-In & Calendar Use

We offer Google Sign-In and optional Google Calendar integration to make your experience more convenient:

• Google Sign-In: When you choose "Sign in with Google," Google shares your basic profile (name and email address) with us so we can create and authenticate your account. We use this information only to establish and maintain your sign-in. We never see or store your Google password.
• Google Calendar Sync (Optional): If you connect Google Calendar Sync, we may create calendar events for your scheduled protocol entries on the Google Calendar you authorize. We only read and write the calendar event data you explicitly permit; we do not access your email, contacts, or other Google data.
• Revoking Access: You can disconnect Google Calendar Sync from your account settings at any time, and you can revoke our access entirely from your Google Account security settings.

5. Data Sharing & Third Parties

We do not sell your personal information. We share data only with service providers who help us operate the Site:

• Base44 (Platform Provider): Hosting, authentication, and database infrastructure. Base44 does not process or store your payment card information.
• Stripe (Payment Provider): Handles all subscription billing and payment processing. When you purchase a membership, your payment card details are collected and processed directly by Stripe, not by CertifiedTide or Base44.
• Google: Account authentication via Google Sign-In and optional Google Calendar event management, when you choose to use these features.
• Instagram (Meta): Posting research updates to the CertifiedTide Instagram account. No personal account data is shared with Instagram.

Each provider has its own privacy policy governing how they handle your data.

6. Data Security

We implement industry-standard security measures to protect your data, including encrypted authentication, row-level database access controls that keep your personal protocol and journal data visible only to you, and secure payment processing through Stripe, our PCI-compliant payment provider. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights & Deletion Requests

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and all associated data (protocol entries, journal logs, vial tracking, and membership records).
• Cancel your subscription at any time.
• Opt out of non-essential communications.

To submit a deletion request or exercise any of these rights, contact us using the details in Section 11. We will process verified requests within 30 days.

8. Cookies

The Site uses essential cookies for authentication and session management. Analytics tools may use cookies to understand usage patterns. You can control cookies through your browser settings.

9. Children's Privacy

The Site is not intended for individuals under 18 years of age. We do not knowingly collect information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page. Continued use of the Site constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, deletion requests, or to exercise your data rights, please contact us at info@certifiedtide.com.