Privacy Policy

Last updated: August 11, 2025

At Rhappsody, LLC, we are committed to protecting your privacy. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of information when you use our platform for creating and managing apps.

1. Information We Collect

Account Information

When you create an account, we collect your email address and optional profile information (name, profile picture). We also store your authentication method preference (magic link or password).

Authentication and Security Data

To protect your account and our platform, we collect:

• IP addresses for security monitoring and geographic location
• Login timestamps and activity patterns
• Browser and device information (user agent strings)
• Geographic location data (country and city) via Cloudflare
• Failed login attempts for account protection

Cookies and Session Data

We use essential cookies for authentication and security:

• Session cookies for keeping you logged in (30-day duration)
• Security tokens for login verification
• Magic link tokens for passwordless authentication

2. How We Use Your Information

Service Delivery

We use your information to provide and maintain our platform services, including user authentication, app hosting, and account management.

Security and Fraud Prevention

We analyze login patterns, IP addresses, and device information to:

• Protect against unauthorized access to your account
• Detect and prevent fraudulent activity
• Monitor for suspicious behavior
• Implement account lockout protection

Communication

We may send you service-related emails including magic links for authentication, account verification, and important service updates.

3. Information Sharing

We do not sell your personal information. We may share information only in these limited circumstances:

• With service providers (Cloudflare, email services) necessary for platform operation
• When required by law or to protect our legal rights
• In connection with a business transaction (merger, acquisition)

4. Data Security

We implement industry-standard security measures including:

• Encrypted password storage using PBKDF2 with 100,000 iterations
• Secure session management with HttpOnly cookies
• Geographic and behavioral anomaly detection
• Regular security monitoring and updates

5. Data Retention

We retain your information as follows:

• Account data: Until account deletion
• Session data: 30 days or until logout
• Security logs: 90 days for fraud prevention
• Magic link tokens: 1 hour expiration

6. Your Rights and Choices

Account Management

You can access, update, or delete your account information through your dashboard or by contacting us.

Cookie Management

While you can disable cookies in your browser, this may prevent you from using our authentication system. See our Cookie Policy for more details.

Data Deletion

You can request complete account and data deletion by contacting us at privacy@rhappsody.com.

7. Third-Party Services

We use the following third-party services:

• Cloudflare: CDN, security, and geographic data
• Sentry: Error tracking and monitoring
• Email Service: Magic link delivery

8. International Data Transfers

Your data may be processed in various regions where our infrastructure operates, including the United States and Europe, with appropriate safeguards in place.

9. Children's Privacy

Our services are not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email or platform notifications. Continued use constitutes acceptance of updated terms.

11. Contact Us

For privacy-related questions or requests:

• Email: privacy@rhappsody.com
• General inquiries: info@rhappsody.com