Review checklist
- List data categories only after confirming the live stack: account data, project submissions, audit reports, billing metadata, analytics, and support messages.
- Separate Stripe-hosted payment data from Webnailed account and entitlement data.
- Confirm Supabase, hosting, email, analytics, and retention details before publication.
- Keep data access, deletion, consent, international transfer, and cookie wording owner/legal-gated.
Placeholders for approved wording
Owner/legal fill
Final data categories, purposes, retention periods, and lawful basis wording.
Owner/legal fill
Final processor/subprocessor list and security summary.
Owner/legal fill
Final member rights, deletion/export process, and consent withdrawal wording.
Owner/legal fill
Final cookie, analytics, contact, and policy-change wording.