Legal
Legal
This page combines the current service terms, privacy notice, and cookie posture for the hosted SuperTurtle app at `app.superturtle.dev`. It is the operational baseline for the current private-access phase and should still be reviewed by counsel before public launch.
1. Service scope
SuperTurtle provides a hosted control plane and managed-cloud product for SuperTurtle. The service is currently offered on an early-access basis and may change, be interrupted, or be withdrawn at any time.
2. Accounts and access
Access is currently provided through GitHub authentication. You are responsible for activity performed through your account and for maintaining control of your GitHub identity and any linked provider credentials.
3. Acceptable use
You may not use the service to break the law, interfere with the service, abuse third-party systems, attempt unauthorized access, or process content you do not have the right to use. We may suspend or terminate access if we reasonably believe the service is being misused.
4. Billing and availability
Pricing, billing state, entitlements, and product features may change during the private-access period. Unless separate written terms say otherwise, the service is provided on an as-is and as-available basis, without uptime commitments.
5. Data we process
Depending on how you use the app, we may process GitHub identity data returned during sign-in, account and entitlement state, billing state when enabled, and managed-runtime state needed to operate the product.
We also process essential session data required to keep you signed in securely and basic operational request metadata where needed to run or protect the service.
6. Marketing consent
If you opt in to receive product updates, we store the email address tied to that opt-in, the exact consent wording, the consent version (`2026-03-27`), the source, the timestamp, and basic request metadata such as IP address and user agent where available.
You can withdraw that consent at any time on the withdrawal page.
7. Infrastructure and processors
The app currently relies on hosted providers such as Vercel for hosting and Supabase for authentication and database storage. GitHub is used as the authentication provider for account sign-in. Stripe may process billing data when billing is enabled for your account.
8. Cookies and analytics
The app uses essential authentication and session cookies so users can sign in and keep a session open securely. These cookies are necessary for the product to function.
The app also uses Vercel Web Analytics. Based on the current integration and provider documentation, this is treated as privacy-friendly analytics rather than advertising or cross-site tracking.
The app does not currently use advertising cookies, personalization cookies, or third-party marketing trackers on the hosted surface. If non-essential cookies or tracking technologies are added later, the consent flow should be updated before they are enabled.
9. Your controls
You can stop using the service at any time. If you have joined product updates, you can withdraw that marketing consent from the withdrawal page. Additional data rights and retention handling should be finalized before public launch.