Privacy Policy

Last updated: May 26, 2026

This Privacy Policy describes how Margin ("we," "us," "our"), operated by Downey Strategy, collects, uses, and protects your information when you use Margin (the "Service") at marginfor.com.

1. Information we collect

• Account information: your email address and name, provided when you sign up via Auth0.
• Service data: the categories, estimates, time entries, notes, and other content you enter into the app. This is your data; we treat it as such.
• Payment information: handled entirely by Stripe. We never see or store your full payment card details. We do store your Stripe customer ID and subscription status.

2. How we use information

• To provide and improve the Service.
• To process payments (via Stripe) and manage your subscription.
• To send transactional emails (e.g., receipts, password resets, account-related notices).
• We do not sell your information. We do not use it to train AI models.

3. Who we share information with

• Auth0 (authentication provider): stores your login credentials.
• Stripe (payment processor): handles all payment details.
• Railway (hosting provider): hosts the application and database.
• We do not share your information with any other third parties.

4. How long we keep your data

We keep your data as long as your account is active. If you cancel or delete your account, we delete your data within 30 days, except where retention is required by law.

5. Your rights

• Access: you can view your data in the app at any time.
• Delete: email us at brittany@downeystrategy.com to request deletion of your account and data.
• Correct: email us if any of your data is incorrect and you can't fix it in the app.

6. Security

We use reasonable security measures, including encryption in transit (HTTPS/TLS). No system is perfectly secure; we will notify affected users of a security breach as required by applicable law.

7. Cookies

We use cookies to keep you signed in, and — only with your consent — Google Analytics cookies to understand how Margin is used so we can improve it. We do not use advertising cookies. You can accept or decline analytics cookies using the banner shown on your first visit, and analytics stays off unless you accept.

8. Children

The Service is not directed to anyone under 16. We do not knowingly collect data from children.

9. EU / UK residents (GDPR)

If you are in the European Economic Area or the United Kingdom, you have the following rights with respect to your personal data:

• Right of access to the personal data we hold about you.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten").
• Right to restrict processing in certain circumstances.
• Right to data portability — to receive your data in a portable format.
• Right to object to processing based on our legitimate interests.
• Right to lodge a complaint with your local data protection authority.

Our legal basis for processing your personal data is (a) performance of our contract with you (providing the Service), (b) compliance with legal obligations, and (c) our legitimate interests in operating and improving the Service.

International data transfers: Margin is operated from the United States. If you access the Service from outside the U.S., your data will be transferred to and processed in the U.S. We rely on Standard Contractual Clauses or other lawful mechanisms with our sub-processors to protect such transfers.

To exercise any of these rights, contact brittany@downeystrategy.com. We will respond within 30 days.

10. California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, the right to delete it, the right to correct inaccurate information, and the right to opt out of any sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, contact brittany@downeystrategy.com.

11. Changes to this policy

We may update this policy from time to time. We'll notify you of material changes via email or an in-app notice.

12. Contact

Questions about this policy? Email brittany@downeystrategy.com.