Privacy Policy

Welcome to 4u4.us ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://4u4.us and use our services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.

We collect information you voluntarily provide when you:

• Register for an account (email address, username)
• Subscribe to a paid plan (processed securely via Stripe — we never store raw card data)
• Contact us via support channels
• Connect third-party API keys (stored only in your browser's localStorage, never on our servers)

We also automatically collect limited technical data:

• Browser type and version
• Operating system
• Pages visited and time spent (anonymised analytics)
• IP address (for security, fraud prevention, and rate limiting)

4u4.us is designed with data minimalism at its core. We do not store the contents of your MindMap nodes, Kanban cards, or Gantt tasks on our servers. Your project data is stored either in your connected GitHub repository or locally on your device — you control it entirely.

The only project-related data we persist in our database is the project title (visible in the root node) and metadata such as creation date and team membership. Nothing else.

API keys you provide (Google Gemini, Groq, Anthropic, etc.) are stored exclusively in your browser's localStorage. They are never transmitted to or stored on our servers.

• To create and manage your account
• To process payments and manage subscriptions
• To provide, operate, and improve our services
• To send transactional emails (account confirmation, invoices)
• To detect, prevent, and address technical issues or fraud
• To comply with legal obligations

We do not sell your personal data to third parties. Ever.

We use the following trusted third-party services to operate 4u4.us:

• Clerk — authentication and session management
• Stripe — payment processing (PCI-DSS compliant)
• Supabase — database and real-time collaboration infrastructure
• GitHub — optional project data storage (when you connect a repository)
• Vercel — hosting and edge delivery

Each of these services has its own Privacy Policy governing their data handling practices.

We retain your account information for as long as your account is active. You may request deletion of your account and associated data at any time by emailing privacy@4u4.us. Upon confirmed deletion, your personal data will be removed from our systems within 30 days, except where retention is required by law.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Objection — object to certain types of processing
• Restriction — request restriction of processing in certain circumstances

To exercise any of these rights, contact us at dpa@4u4.us.

We implement industry-standard security measures including TLS encryption in transit, encrypted storage for sensitive fields, and strict access controls. However, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication via Clerk.

Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal data, we will promptly delete it. If you believe we may have inadvertently collected such data, please contact privacy@4u4.us.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a prominent notice on our website. The "last updated" date at the top of this page indicates the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy, please contact us at: