Privacy Policy

This Privacy Policy describes how OfficeKit ("we", "us", or "our") collects, uses, protects, and discloses information when you access our website, applications, and productivity tools.

OfficeKit provides modular workplace utilities ranging from client-side document generators to cloud-synchronized account features. Data handling varies according to whether a tool operates entirely in your local browser or interfaces with our platform database, as detailed below.

Depending on how you use OfficeKit, you may provide different types of information:

When you register for an account or authenticate on OfficeKit, authentication services are managed via our Supabase backend infrastructure. We collect and store your email address, hashed authentication credentials, full name (if provided), and account metadata (such as account creation timestamp and last active session).

We use this information strictly to authenticate your sessions, maintain your account security, and provide access to saved items. We do not sell, rent, or monetize your account details or contact information.

When you submit an inquiry through our public Contact Us form, we collect the full name, email address, subject, and message content you provide.

These submissions are persisted in our secure administrative database and trigger an in-app notification for platform administrators to review your request. If an administrative transactional email notification service is configured on the server, a notification copy may be delivered to authorized platform administrators.

We retain contact submissions solely to respond to your inquiries, investigate reported issues, and maintain communication records. We do not merge Contact Us submissions into marketing lists or use your email for promotional marketing without consent.

When signed into an authenticated account, you may choose to save email signatures and document drafts using our "Saved Work" infrastructure.

Saved data includes your signature templates, typography configurations, colors, contact links, and custom layout settings. These records are stored in our PostgreSQL database protected by Row Level Security (RLS) linked strictly to your authenticated user identifier.

You maintain full ownership of your saved items and can update or delete them directly through your account dashboard at any time.

When you upload an image (such as an avatar or company logo) for an email signature, the asset is uploaded to our managed Supabase Storage buckets ("officekit-assets").

These image assets are hosted with public URLs strictly so that external email clients (such as Microsoft Outlook, Apple Mail, and Gmail) can download and display your logo or avatar when recipients view your emails.

Uploaded assets are tracked in our asset database and remain associated with your signature until deleted or replaced. You should only upload image files you have the legal right to host and distribute.

Many OfficeKit utility tools operate locally in your web browser without transmitting your files or text to our servers:

You can use many OfficeKit tools as a guest without creating an account. For unauthenticated guests:

OfficeKit utilizes browser storage technologies strictly for functional and authentication purposes:

OfficeKit relies on reliable cloud infrastructure to host and deliver platform features:

We implement industry-standard technical and organizational security controls designed to protect your personal data:

All network traffic is encrypted in transit using Transport Layer Security (TLS/HTTPS). Database access is safeguarded with PostgreSQL Row Level Security (RLS) policies ensuring users can only read and mutate their own saved items. Passwords are cryptographically hashed and never stored in plain text.

While we implement rigorous security measures, no internet transmission or electronic storage method can guarantee absolute security. Users are responsible for maintaining strong credentials.

Authenticated account information, saved signatures, and uploaded assets are retained for as long as your account remains active. When you delete a saved item or asset from your account, it is marked for deletion or removed in accordance with database lifecycles.

Contact Us submissions are retained in administrative logs for operational reference and support auditability. Guest drafts and local counters stored in your browser persist until you clear browser data or delete them through the interface.

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to access, correct, export, or delete your account data.

To exercise these rights, sign in to your dashboard to manage or delete saved items, or submit a request to our designated privacy contact.

OfficeKit is a workplace productivity suite and is not directed to children under 13 years of age (or the applicable legal age in your jurisdiction). If you believe a child has provided personal information to a storage-enabled feature, please contact us so we can take appropriate steps to remove it.

We may update this Privacy Policy periodically to reflect service evolutions, new tools, or legal requirements. Material updates will be indicated by the "Last updated" date displayed at the top of this document.

For questions or inquiries regarding this Privacy Policy or how your data is handled, please submit a message through our Contact Us page (/contact).

Designated direct administrative email addresses and formal legal contact details are awaiting owner confirmation for commercial publication. During this release, all privacy inquiries are routed through the Contact Us form.