Privacy Policy

Effective September 13, 2026.

This privacy policy covers Northstar Leadership Workspace. Contact support@northstarworkspace.app for support, privacy questions, or data requests.

Information we process

Northstar uses your email address and account identifier to authenticate you and manage team access. Passwords are transmitted securely to Supabase for authentication; the app does not save your password locally. Session tokens are stored in your device’s Keychain.

Team names, memberships, invitation email addresses, strategic priorities, KPI values and history, and decisions are stored in Supabase. Members of each team can view its workspace. Owners invite viewers or editors.

How information is used and shared

We use this information to provide accounts, verify email addresses, recover passwords, share team workspaces, enforce permissions, and resolve service issues. Supabase provides authentication and database hosting; Resend delivers account emails. Porkbun forwards messages sent to our support address to the operator’s email inbox.

Providers process operational information such as service and delivery logs. The configured Supabase database region is Sydney and the Resend sending region is Tokyo; provider infrastructure may process information in other countries.

The app contains no advertising or third-party behavioral analytics SDKs. We do not sell your personal information or use it for advertising tracking.

Storage and choices

Team edits are saved to the server when you tap Upload. Refresh replaces local edits with the server version. Closing a workspace discards edits that were not uploaded. You can sign out to remove the locally stored account session.

You can delete your account in the app. This deletes your owned teams and their workspace data for all members, and removes your membership from teams owned by others. Contributions already included in another owner’s shared workspace may remain. Invitation records addressed to your email are removed.

Provider backups and security or delivery logs may retain information according to provider retention practices. Contact us for access, correction, deletion, or other privacy requests. We will respond subject to applicable requirements and verification of your identity.

Updates

We may update this policy as the service changes. The effective date above identifies the current version.