Privacy Policy

This policy describes how the operator of starterpg.com (“starterpg”, “we”) handles personal information. It covers the marketing site, the dashboard, billing, and operation of the platform. It does not make us responsible for what you store in your own databases — that is yours. Using the Service is also agreement to the Terms of Service.

1. What we collect

• Account data. Email address, password hash (held by our auth provider), name if you give it, organization membership.
• Billing data. Processed by Stripe. We store Stripe customer and subscription ids, plan, and status. We do not store full card numbers.
• Usage and operations. Project metadata, encrypted credentials we need to provision databases, API-key hashes, storage and egress samples, logs, IP addresses, user agents, and rate-limit counters. Logs are for running and securing the Service, not for selling ads.
• Communications. Messages you send via Contact or email.
• Cookies and analytics. Authentication cookies for the dashboard. We also load Google Analytics (GA4, measurement id G-L71QJ6FDQH) on every page to see which pages are used and which product actions happen (sign up, project create, checkout, SQL runs, navigation between product areas). Events do not include emails, SQL, file names, or database contents. Google receives your IP address, device/browser data, and page URLs. We do not run third-party advertising pixels and we do not sell this data.

2. Customer databases and files

Content you put in a project database or bucket is Customer Content. We process it only to provide the Service (hosting, backups of the shared instance, provisioning, abuse response, legal process). We do not sell it. We do not use it to train public AI models. Platform operators can technically access it, as described in the Terms; we do not browse it as a matter of course.

You are responsible for notices, consents, and lawful basis for your end users. If you need a signed data-processing agreement, email support@starterpg.com before putting personal data of others in the Service. Until one is signed, you should not treat starterpg as a vendor approved for HIPAA, PCI cardholder data, or similar regimes.

3. Why we use it

To create and authenticate accounts, provide Postgres and related features, bill and prevent fraud, enforce plan limits, fix outages, measure site usage with Google Analytics, communicate about the Service (including at support@starterpg.com), and comply with law. Legal bases where GDPR or similar law applies: contract, legitimate interests in running a secure platform, and legal obligation.

4. Who we share with

We share personal information with processors who help us run the Service, including:

• our hosting and object-storage providers;
• Google Analytics (site usage measurement);
• our auth and control-plane provider;
• Stripe (payments);
• our email provider, if SMTP is configured.

We may disclose information if we believe it is required by law, to protect the Service or others, or in a merger or sale of assets. We do not sell personal information as that term is used in the CCPA.

5. Retention

Account and billing records are kept while the account is open and as long as needed for tax, dispute, and security logs afterward. Free projects may be deleted after prolonged idle, as described in the Terms. After deletion, residual copies may remain in backups until those backups expire. We cannot promise a particular backup window.

6. Security

We use reasonable technical and organizational measures (encryption of stored secrets, TLS, role isolation on the shared instance, private buckets). No method of transmission or storage is 100% secure. You are responsible for how you handle API keys and for security inside your application.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. Email support@starterpg.com. We will not discriminate against you for exercising privacy rights. We may refuse requests that are unlawful, would break the Service for others, or would require us to access Customer Content we should not inspect.

Deleting your account does not automatically wipe every Customer Content backup. Export first. For California residents: we do not sell personal information. Google Analytics is used to measure our own traffic, not to serve third-party ads on this site. You can block it with a browser privacy tool or Google’s opt-out add-on.

8. Children

The Service is not directed to children under 18. We do not knowingly collect their personal information.

9. International transfers

Infrastructure currently runs in the United States (including Google Cloud us-central1). If you access the Service from elsewhere, you transfer information to the U.S. and instruct us to process it there.

10. Changes

We may update this policy by posting a new version. Continued use after the “Last updated” date is acceptance.

11. Contact

Privacy requests: support@starterpg.com · Contact form