Privacy Policy

CollectMonial (“we”, “us”) builds software that helps creators and SaaS founders collect, manage, and embed customer testimonials. This Privacy Policy explains what personal data we collect, why we collect it, and how we handle it.

By using CollectMonial, you agree to the practices described here. If you don't agree, please don't use the service.

From account holders

• Account data: email address, password (hashed and salted — never stored in plain text), display name. If you sign in with Google we receive your email and basic profile information from Google.
• Subscription data: plan, billing status, customer ID issued by our payment processor. We do not see or store your card number — payment details are handled directly by Dodo Payments.
• Workspace content: the campaigns, branding settings, request links, and testimonials you create or import.

From people who submit testimonials

• Submission content: the name, role, photo, written quote, star rating, and/or video the submitter provides to the creator who shared the collect link.
• Imported social posts: when a creator imports a public X or LinkedIn post as a testimonial, the post text, author name, handle, avatar, and original URL are stored.

Automatically collected

• Usage analytics: page views, click events, performance metrics, and session replays (with all input fields and sensitive content masked at source) via PostHog. Used to understand how the product is used and to fix bugs.
• Standard request logs: IP address, user agent, referrer, and timestamps held by our infrastructure providers for security and debugging.

• To operate, maintain, and secure the service.
• To process payments and manage subscriptions.
• To send transactional emails (sign-up confirmation, password reset, billing receipts, and notifications you opt into).
• To improve the product — diagnose issues, prioritize features, and understand aggregate usage patterns.
• To comply with legal obligations.

We do not sell your personal data and we do not use testimonial content for advertising.

We use the following sub-processors to deliver the service. Each one processes only the data necessary for its function:

• Supabase — authentication, database hosting, file storage references.
• Cloudflare R2 & Stream — video and image storage and delivery.
• Dodo Payments — subscription billing and payment processing.
• Resend — transactional email delivery.
• PostHog — product analytics and privacy-masked session replay.
• Vercel — application hosting and edge delivery.

We use cookies and similar storage for: keeping you signed in, remembering your workspace preferences, and analytics. Most are essential to running the service. You can disable cookies in your browser, but parts of the app may stop working.

We keep your account and workspace data for as long as your account is active. When you delete your account, we permanently delete your workspace, testimonials, uploaded media, and personally identifiable information within 30 days, except where retention is required by law (e.g., billing records).

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. You can:

• Edit account details in Settings.
• Export your testimonials from the dashboard.
• Delete your account at any time from Settings — this removes your workspace and all stored content.
• Email us at the contact below for any other request.

We use industry-standard practices to protect your data: TLS for data in transit, encrypted storage at rest, scoped service tokens, and row-level security on our database. No system is perfectly secure — if you discover a vulnerability, please report it via the contact below.

CollectMonial is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time. Material changes will be announced via email or in-app notice. The “Last updated” date at the top reflects the current version.

Questions or requests regarding privacy? Email support@collectmonial.com.