Privacy Policy

1. Introduction

Welcome to Extemp Speeches ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our extemporaneous speeches leaderboard application (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you sign in with Google OAuth, we collect:

• Your name and email address
• Your Google profile picture (avatar)
• Google account ID for authentication

2.2 Speech Submissions

When you submit speeches, we collect:

• Video or audio recordings of your speeches
• Speech submission timestamps
• Video URLs (if uploaded to Cloudflare Stream or YouTube)
• Audio file URLs (if uploaded to Supabase Storage)

2.3 Feedback and Reviews

When you review speeches (submit ballots), we collect:

• Rating scores (gestures, delivery, pauses, content, entertaining)
• Focus area ratings and feedback
• Written feedback text
• Comparison flags ("better than last" indicators)
• Review timestamps

2.4 User Preferences

We store your preferences including:

• Email reminder preferences
• Focus area for improvement
• Last reminder sent timestamp

2.5 Feature Requests

If you submit feature requests, we collect:

• Feature request title and description
• Submission timestamp
• Your name and email (associated with your account)

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the leaderboard service
• Display your speech submissions and rankings
• Enable peer review and feedback functionality
• Send email reminders (if you opt in)
• Notify you when you receive feedback on your speeches
• Track your progress and focus areas
• Process and respond to feature requests
• Improve and optimize the Service
• Ensure security and prevent fraud

4. Third-Party Services

Our Service uses the following third-party services that may collect, store, or process your information:

4.1 Supabase

We use Supabase for:

• User authentication and account management
• Database storage for user profiles, speeches, and ballots
• File storage for audio recordings
• Real-time data synchronization

Supabase's privacy policy: https://supabase.com/privacy

4.2 Google OAuth

We use Google OAuth for authentication and may request access to:

• Your Google account information (name, email, profile picture)
• YouTube upload permissions (if you choose to upload videos to YouTube)

Google's privacy policy: https://policies.google.com/privacy

4.3 Cloudflare Stream

If you upload videos to Cloudflare Stream, your video files are stored and processed by Cloudflare. Videos uploaded to Cloudflare Stream are processed and encoded by their service.

Cloudflare's privacy policy: https://www.cloudflare.com/privacy/

4.4 YouTube

If you upload videos to YouTube, your videos are stored and managed by YouTube. Videos uploaded through our Service are set to "unlisted" privacy status by default.

YouTube's privacy policy: https://policies.google.com/privacy

4.5 Resend

We use Resend to send transactional emails, including:

• Daily reminder emails (if enabled)
• Notifications when you receive feedback
• Administrative alerts

Resend's privacy policy: https://resend.com/legal/privacy-policy

4.6 Vercel

Our Service is hosted on Vercel, which may collect analytics and usage data.

Vercel's privacy policy: https://vercel.com/legal/privacy-policy

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Row Level Security (RLS) policies on all database tables
• Authentication required for all data access
• Secure file storage with access controls
• Encrypted data transmission (HTTPS)
• Regular security updates and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can view your profile information, speeches, and feedback through the Service
• Update: You can update your email preferences and focus area through the Service
• Delete: You can request deletion of your account and associated data by contacting us
• Email Preferences: You can opt out of email reminders at any time through your account settings
• Data Portability: You can request a copy of your data in a portable format

7. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. If you request account deletion, we will delete your personal information within a reasonable timeframe, except where we are required to retain it for legal or legitimate business purposes.

Note: Videos uploaded to Cloudflare Stream or YouTube are subject to those services' retention policies. Audio files stored in Supabase Storage will be deleted when your account is deleted.

8. Children's Privacy

Our Service is intended for educational use. If you are under 13 years of age, please obtain parental consent before using our Service. We do not knowingly collect personal information from children under 13 without parental consent. If we become aware that we have collected information from a child under 13 without parental consent, we will take steps to delete that information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: