Privacy Policy

01 // Scope

This Privacy Policy describes how Prime 88 ("we," "our," "us") collects, uses, stores, and shares information about you when you visit prime88.studio, access the CRM workspace at crm.prime88.studio, or interact with our operations infrastructure.

02 // Information We Collect

Public Surfaces. When you browse prime88.studio, we collect standard web analytics data: pages visited, referrer, browser type, device type, and anonymized IP address (truncated or hashed). We do not use tracking cookies for advertising purposes.

Authentication. When you sign in via Google OAuth or email, we receive your email address, Google account identifier (sub), and any profile information you authorize. This data is used solely for identity and session management.

Workspace Data. Tenants and their authorized users may submit business data, documents, and configuration information to their workspace. Prime 88 processes this data only as necessary to provide the Service and has no independent right to access or use it.

03 // How We Use Information

We use your information to: (a) provide, maintain, and improve the Service; (b) authenticate your identity and manage sessions; (c) communicate Service updates, security notices, and support responses; (d) detect and prevent abuse, fraud, or unauthorized access; (e) comply with legal obligations.

04 // Data Storage and Security

Data is stored on Cloudflare's global network and Supabase's cloud infrastructure. We enforce encryption in transit (TLS 1.3) and at rest. Authentication tokens are scoped, short-lived, and stored in HTTP-only secure cookies. We do not store raw passwords — authentication is delegated to Google OAuth and Supabase Auth.

05 // Contact

For privacy inquiries or data rights requests, contact [email protected].