Legal
Privacy Policy
Last updated: September 25, 2026
1. What we collect
Founding Roster (waitlist): when you join, we collect your name, email address, and how you describe your work (for example, agency or affiliate marketer). We use this to send your free Subscription Audit Kit, launch updates, early-access invitations, and founding-member offers. If you arrived through a partner’s link, we also record that partner’s referral code.
Partner program signups: if you apply to be a partner, we collect your name, email address, brand, website or social profile, audience details, and how you plan to promote Subastian. Applications are stored in our Supabase database, and we use them to review your application and send the Partner Launch Kit and program updates.
Account information (after launch): your name, email address, and login credentials. Our authentication provider stores passwords as secure one-way hashes, never in plain text.
Billing information (after launch): we never see or store your full card number. Payments are handled by our merchant of record, Lemon Squeezy. We receive your plan, billing status, and transaction history so we can give you the right access.
Subscription data you enter: the names, costs, billing cycles, and renewal dates of the subscriptions you track in Subastian.
Technical data: standard server logs (such as IP address and browser type) that our hosting providers collect to keep the site secure and working.
Affiliate information: if you join our affiliate program, Lemon Squeezy collects your details and payout information to track referrals and pay commissions.
2. How we use it
- To run the waitlist and send the emails you signed up for
- To provide, secure, and improve Subastian
- To process subscriptions and send renewal alerts and account notices
- To respond to support requests
- To meet legal and tax obligations
3. Who helps us run Subastian
We share data only with providers that help us operate the service, and only as much as each one needs:
| Provider | What it does for us |
|---|---|
| Google (Sheets, Apps Script, Gmail) | Receives and stores Founding Roster and partner signups; sends signup emails; business email |
| GitHub Pages | Hosts this website |
| Supabase | App database, user authentication, and file storage |
| Vercel | Hosts the Subastian app |
| PostHog | Website analytics (page views, clicks, and signup counts; no names or emails) |
| Lemon Squeezy | Checkout, payment processing, sales tax, and our affiliate program (merchant of record) |
4. What we don’t do
- We do not sell your personal data.
- We do not share your subscription list with the companies you’re subscribed to.
- We do not read your email or connect to your bank account. Subastian does not currently offer bank-linking.
5. If bank-linking is added later
You enter subscription data yourself, either manually or by CSV import. Subastian does not connect to your bank. If we ever add a bank-linking feature, we’ll update this policy first to explain what the linking provider can access, how long we keep that data, and how you can disconnect it at any time.
6. Cookies and analytics
This website does not use advertising cookies or analytics cookies. We use PostHog (US-hosted) to count page views, button clicks, and completed signups so we can see which pages and partner links are working. PostHog stores a random visit ID in your browser’s session storage, which is cleared when you close the tab. We do not send your name or email address to PostHog, form contents are not recorded, and we do not record your screen. The Subastian app uses essential cookies only, such as keeping you logged in. You can control cookies and site storage through your browser settings; disabling essential cookies may break login.
7. Your rights and choices
- Unsubscribe from waitlist and marketing emails anytime with the link in any email.
- Access, correct, or export the subscription data you’ve entered, from your account settings.
- Request deletion of your account or waitlist entry by emailing subastianllc@gmail.com. We’ll delete your data within 30 days of a verified request, except records we must keep for tax or legal reasons. Lemon Squeezy keeps its own transaction records as merchant of record.
8. Data security
We use industry-standard safeguards, including encryption in transit (HTTPS), hashed passwords, and database access controls that keep each customer’s data separate. No system is 100% secure. If we become aware of a breach affecting your personal information, we’ll notify you without unreasonable delay.
9. Data retention
We keep waitlist entries until launch and for a reasonable time afterward, or until you unsubscribe or ask us to delete them. We keep account and subscription data while your account is active, and for a reasonable period after cancellation in case you return, unless you ask us to delete it sooner.
10. Children’s privacy
Subastian is for businesses and adults. It is not directed at anyone under 18, and we do not knowingly collect data from children.
11. Changes to this policy
We’ll email active users about material changes at least 14 days before they take effect, and update the date at the top of this page.
12. Contact
Questions about this policy or your data: subastianllc@gmail.com
Subastian, LLC · 4400 S Quebec St, Unit A204, Denver, CO 80237