Privacy Policy

Vidi ("we", "our", or "us") provides an email read-receipt service delivered as a web app and Chrome extension. This policy explains what information we collect, why we collect it, who processes it, and the rights you have over it. We are committed to collecting only what the service needs to function.

Information We Collect

• Account information. Your name and email address, which you provide when you create an account.
• Authentication information. Login credentials and session tokens used to keep you signed in across the web app and the Chrome extension. We never store passwords in plain text; authentication is handled by our identity provider (Supabase Auth).
• Email tracking data. For each email you choose to track, we store the recipient's email address, the subject line, the send time, and subsequent open and link-click events. This lets us show you the read-receipt ticks and your tracking history.
• Technical and location data. When a tracked email is opened, our tracking pixel records the opener's IP address and browser user-agent. We use these to detect a genuine open, approximate region, and distinguish a real human open from automated machine opens (e.g. Apple Mail Privacy Protection, corporate security scanners, and provider pre-fetch proxies) so that we do not report false read receipts.
• Payment information. Subscription payments are processed by Polar, our merchant of record. We do not receive or store your full card details; we receive only your subscription status and the limited billing information Polar shares with us.

How We Use Your Information

We use the information above solely to provide and operate the read-receipt service: to keep you signed in, to display whether your emails have been opened, to send you notifications when a tracked email is read, to process your subscription, and to maintain and improve the accuracy and security of the service. We do not use your data for any purpose unrelated to this single purpose.

Service Providers

We share data only with the processors required to run the service, each under their own data protection terms:

• Supabase — database hosting and authentication.
• Vercel — web application hosting.
• Polar — subscription payment processing (merchant of record).
• Resend — transactional and notification emails.
• InboxSDK — the bundled library used to integrate ticks into Gmail; it sends limited error and event telemetry to its provider. No email content is sent to InboxSDK.

We do not sell or rent your personal data to anyone.

Data Retention and Your Rights

We retain your account and tracking data for as long as your account is active. You can request access to, correction of, or deletion of your data at any time, and deleting your account removes your personal data and tracking history. Depending on your location, you may have rights under the GDPR or other privacy laws, including the right to erasure and the right to object to processing. To exercise any of these rights, contact us using the details below.

Contact

Questions or requests? Email us at daniel@vidi.email.