Privacy Policy

TL;DR

• We store your data in Supabase with strict row‑level security.
• We host the app on Vercel.
• We use the Vercel AI SDK to call AI models; your data is not used to train them.
• Sign in with email, Google, or Microsoft. We don’t resell your data.
• We use Postmark to send essential emails.
• Optional: You can import from Todoist; we only use that data in-app.
• You can delete your account and all your data at any time, no questions asked.

Introduction

BigPicture ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share your information when you use our journaling and productivity service.

Information We Collect

When you use BigPicture, we collect:

• Account information (via email, Google, or Microsoft authentication)
• Entries you create
• Sentiment ratings for your entries
• Optional imports you authorize (e.g., Todoist)
• Team collaboration data (if you use team features)
• Usage data and analytics

How We Use Your Information

We use your information to:

• Provide and improve our journaling services
• Generate insights from your journal entries
• Enable team collaboration features
• Communicate with you about your account
• Analyze usage patterns to improve our service

Third-Party Services

We use several third-party services to power BigPicture:

• Supabase: Database and authentication. Your data is stored in secure Postgres with RLS.
• Vercel: Application hosting and content delivery.
• Vercel AI SDK: Access to AI models. We use providers that do not train on your data.
• OAuth Providers: Email, Google, and Microsoft for sign-in.
• Postmark: Transactional email delivery (e.g., login links, notifications).
• Todoist: Optional connection for imports when you explicitly authorize it.

Data Storage and Security

Your journal entries and personal data are stored securely on Supabase's infrastructure using their PostgreSQL database. We implement row-level security policies to ensure your private entries remain private, and team data is only accessible to authorized team members.

Data Retention

We retain your journal entries and account information until you choose to delete them. You can delete individual entries or your entire account at any time through the application interface.

Your Rights

You have the right to:

• Access your personal information
• Delete your journal entries and account
• Export your journal data
• Control sharing settings for team features
• Object to processing of your information

Team Collaboration Privacy

When using team features:

• Personal entries remain private unless explicitly shared
• Team owners can manage member access
• You control which entries are shared with your team

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at info@bigpicture.guru.