Privacy Policy

Controller and contact

DueroBase LLC is the data controller for duerobase.com and related services. Privacy, deletion, or account requests can be sent to support@duerobase.com.

Data we collect

When you join the Waitlist, sign in, redeem an invite, or access the Playbook, we may collect your email address, application status, sign-in state, invite redemption state, GitHub username or repository invite status, basic access logs, browser, and device information.

When Stripe Checkout is introduced, we will store the minimum identifiers needed for payment status, such as Stripe customer, checkout session, payment intent, refund, or dispute references. Full card numbers, CVC, and sensitive payment details are handled by Stripe and are not stored by DueroBase.

How we use data

We use this data to review private-beta access, send invites, grant or restrict Playbook and source repository access, provide sign-in and security checks, process payment state, respond to support requests, and improve the product delivery workflow.

We may also use aggregated access, submission, and error data to understand the public site, Waitlist, Checkout, and Playbook funnel.

Third-party processors

DueroBase uses Supabase for database and authentication, GitHub for private repository invitations, plans to use Stripe for payments and receipts, and may use a transactional email provider for Magic Links, invites, and entitlement notifications.

On the public marketing site (excluding admin pages), we use Microsoft Clarity for session replay and heatmaps to understand how visitors use the site. Clarity may collect interaction data such as clicks, scrolls, and page views.

These services process data only as needed to provide DueroBase functionality. Your interactions with those services may also be governed by their own privacy policies.

Retention and deletion

We retain data for as long as needed to provide the service, meet payment and compliance obligations, investigate security or support issues, and maintain reliable operations. Rejected or inactive Waitlist submissions may be cleaned up periodically.

You can request access, correction, or deletion of your data at support@duerobase.com. Some payment, audit, or security records may be retained longer where required for legal, accounting, or abuse-prevention reasons.

Security and international processing

We protect data through controlled access, server-side validation, least-privilege operations, and managed service security controls. Because DueroBase serves a global audience, data may be processed in the United States or other regions where our service providers operate.