your data, plainly.

Recto is a document studio for creative teams. When this policy says “we”, it means the team that runs Recto. You can reach us through the contact form.

If you have an account:

• Your email address, and your name if you give it. Your password is handled by our sign-in provider and stored only as a secure hash — we never see it.
• What you make: documents, pages, text, brand kits (logos, colours, fonts), images you upload, comments you resolve and saved versions.
• Your plan and when your account was created, so we can run the 7-day trial.

If you open a shared link:

• Reading statistics for the person who sent it: a random session number, how long each page was read, the last page reached, and your country (worked out by our hosting provider — we do not store your IP address).
• If you leave a comment: the name you type and your comment. Your name is also remembered in your own browser so you don’t have to type it again.
• If the link has a password: failed attempts are logged against a scrambled (hashed) version of your network address for up to one day, to stop people guessing passwords.

• To run the service you asked for: sign you in, save and show your documents, share links, and send the emails you need (confirmation and password reset).
• To show document owners how their shared documents were read (“verso”).
• To keep Recto safe: limiting repeated password guesses and spam comments.
• To manage your plan, and — once billing is live — payments.

When you share a document, you decide what goes in it and who gets the link. For the comments and reading statistics your clients create, you are responsible for having a lawful reason to collect them, and we process them on your behalf only to provide Recto. Let your clients know that shared documents include reading statistics.

We only use what Recto needs to work:

• Sign-in cookies that keep you logged in.
• An unlock cookie for each password-protected link you open, so you aren’t asked again.
• Browser storage for small preferences, such as your commenter name, and for the reading session of a shared link.

No advertising cookies and no third-party analytics.

• Supabase — our database, sign-in and file storage. Your account, documents and uploads are stored with them.
• Our hosting provider — serves the website and tells us a viewer’s country.
• NOWPayments — handles crypto payments for Studio. We send them an order number and the price; they handle the payment itself and tell us when it’s confirmed. We never see or store your wallet’s private details.
• Unsplash, Iconify and DiceBear — when you browse photos, icons or illustrations in the editor, your browser asks their services directly, so they receive your network address. Photos from Unsplash are shown from Unsplash’s servers.
• Resend — sends our emails: payment receipts, plan reminders and replies to messages. They receive your email address and the email itself.

These providers may process data outside your country. We only share what each one needs to do its job.

• Your account and work: until you delete them or delete your account. Payment records (amount, date, order number) are kept after an account is deleted, because we need them for our accounts. If your trial ends, your work is kept — locked — so it is there when you upgrade.
• Documents in the trash: permanently deleted after 30 days, with their comments, reading statistics and versions.
• Failed password attempts on a shared link: up to one day.

You can ask us for a copy of your data, to correct it, or to delete your account and everything in it. You can delete your account yourself on the billing page; for anything else, use the contact form. If you commented on or read a document someone shared with you, ask them first; we’ll help them fulfil your request.

Connections are encrypted. Each account can only reach its own data — this is enforced by the database itself, not just the app. Share-link passwords are stored only as secure hashes, uploads are limited to JPG, PNG and WebP images up to 2 MB, and repeated guessing is rate-limited. No system is perfectly secure; if something goes wrong that affects you, we will tell you.

Recto is made for professionals and isn’t intended for anyone under 16.

If we change how we handle personal data, we’ll update this page and its date, and tell account holders by email about anything significant.