Privacy Policy

Vidi ("we", "our", or "us") provides an email read-receipt service delivered as a web app and Chrome extension. This policy explains what information we collect, why we collect it, who processes it, and the rights you have over it. We are committed to collecting only what the service needs to function.

Information We Collect

• Account information. Your name and email address, which you provide when you create an account.
• Authentication information. Login credentials and session tokens used to keep you signed in across the web app and the Chrome extension. We never store passwords in plain text; authentication is handled by our identity provider (Supabase Auth).
• Email tracking data. For each email you choose to track, we store the recipient's email address, the subject line, the send time, and subsequent open and link-click events. This lets us show you the read-receipt ticks and your tracking history.
• Technical and location data. When a tracked email is opened, our tracking pixel records the opener's IP address and browser user-agent. We use these to detect a genuine open, approximate region, and distinguish a real human open from automated machine opens (e.g. Apple Mail Privacy Protection, corporate security scanners, and provider pre-fetch proxies) so that we do not report false read receipts.
• Payment information. Subscription payments are processed by Polar, our merchant of record. We do not receive or store your full card details; we receive only your subscription status and the limited billing information Polar shares with us.

How We Use Your Information

We use the information above to provide and operate the read-receipt service: to keep you signed in, to display whether your emails have been opened, to send you notifications when a tracked email is read, to process your subscription, and to maintain and improve the accuracy and security of the service. We also measure how people find and use Vidi, as described under Cookies and Analytics below. We do not use your data for anything else.

Service Providers

We share data with the service providers below, each under their own data protection terms:

• Supabase — database hosting and authentication.
• Vercel — web application hosting.
• Polar — subscription payment processing (merchant of record).
• Resend — transactional and notification emails.
• InboxSDK — the bundled library used to integrate ticks into Gmail; it sends limited error and event telemetry to its provider. No email content is sent to InboxSDK.
• Google Analytics — measures visits to our website and a few steps in using Vidi. Details under Cookies and Analytics below.
• Microsoft Clarity — records how visitors move around our website, so we can find and fix the parts that are hard to use.

We do not sell or rent your personal data to anyone.

Cookies and Analytics

Our website uses Google Analytics. It sets two cookies, _ga and _ga_7WH3C5SMGR. They hold a random ID so Google can tell a returning visitor from a new one, and they last up to two years. Google receives the pages you visit, the site that sent you, your device and browser type, and your approximate location. Like any website your browser contacts, it also receives your IP address. When you sign up, Google Analytics also records whether you used email or Google sign-in, and which plan you chose.

Some steps happen outside our website, so our server reports them to Google Analytics directly: installing the Chrome extension, tracking your first email, and buying a plan. The install report uses a random ID the extension creates for itself. The other two use your Vidi account ID, a random code rather than your name or email address. A purchase report also includes the plan and the price. We never send Google your name, your email address, or anything about the emails you track.

Our website also uses Microsoft Clarity. It records how you move around the site: your clicks, your scrolling and the pages you view. It hides anything you type into a form.

You can block or delete cookies in your browser settings. Google also offers a browser add-on that turns Google Analytics off on every website: tools.google.com/dlpage/gaoptout.

Data Retention and Your Rights

We retain your account and tracking data for as long as your account is active. You can request access to, correction of, or deletion of your data at any time, and deleting your account removes your personal data and tracking history. Depending on your location, you may have rights under the GDPR or other privacy laws, including the right to erasure and the right to object to processing. To exercise any of these rights, contact us using the details below.

Contact

Questions or requests? Email us at daniel@vidi.email.