Legal

Privacy Policy

Effective date: May 28, 2026

Overview

This policy explains what personal data Scent Report collects, why it is collected, and how it is handled. Scent Report is committed to handling your data with care and in compliance with applicable privacy law, including the General Data Protection Regulation where it applies.

What we collect

Email address. Collected when you join the waitlist or subscribe. Used to deliver the weekly briefing and essential account communications.

Billing information. Collected by Stripe at the point of payment. Scent Report does not store payment card numbers or sensitive billing details. Stripe's privacy policy governs the handling of payment data.

Email engagement data. Open rates and link clicks are tracked by our email delivery provider to measure delivery performance and confirm receipt of the briefing. This data is not used for advertising.

Site activity data. Anonymous page views, key button clicks, waitlist signups, and founding-member conversion events are tracked in a first-party event log to understand which parts of the site are working. This data is not used for advertising.

Account data. Subscription tier, billing status, and account preferences are stored to manage your subscription and deliver the correct version of the briefing.

How we use it

We use your data only for the following purposes:

  • To deliver the weekly briefing and account-related emails
  • To process payments and manage your subscription state
  • To measure email delivery performance
  • To understand site usage and improve the conversion flow
  • To communicate service updates, pricing changes, or operational notices

We do not use your data for advertising. We do not sell, rent, or trade email addresses or any other personal data.

Who we share it with

Your data is shared only with the service providers required to operate Scent Report:

Stripe. Payment processing. Card data is handled entirely by Stripe under their privacy policy.

Resend. Email delivery. Your email address is shared with Resend to deliver the briefing and account emails.

Supabase. Database hosting. Account and subscription data is stored in Supabase's infrastructure.

We do not share subscriber data with any other third party except where required by law.

Data retention

Waitlist records are retained until you request deletion or for 24 months after the public launch date, whichever comes first.

Subscriber records are retained while your subscription is active. After cancellation, records are kept for 12 months for accounting and legal purposes, then deleted.

Your rights

You have the right to access the personal data Scent Report holds about you, request correction of inaccurate data, and request deletion of your data. You may withdraw consent to marketing emails at any time using the unsubscribe link in any email from Scent Report.

To exercise any of these rights, email legal@scentreport.com. Requests are responded to within 30 days.

Security

Scent Report uses encrypted connections for all data transmission and access controls on all data stores. No system is entirely without risk, but we take reasonable and industry-standard measures to protect your data.

Changes to this policy

Material changes to this policy will be communicated by email to active subscribers with 30 days' notice before the updated policy takes effect. Continued use of the service after the notice period constitutes acceptance.

Contact

Privacy questions: legal@scentreport.com