Privacy Policy

1. Information we collect

We collect only what we need to operate the Service:

• Email address — provided by you when you sign up or sign in. We use it as your unique account identifier.
• Magic-link authentication tokens — short-lived one-time codes we email you to verify ownership of the email address and sign you in. Tokens expire within 10 minutes and are single-use.
• Account activity — sign-in timestamps, source IP address (for security/abuse detection), and any content or settings you create on the platform.
• Cookies — a session cookie to keep you signed in after authentication. We do not use third-party advertising cookies.
• Bot-protection signals — hCaptcha challenge responses on the signup form (subject to hCaptcha's privacy policy).

2. How we use information

• To create and operate your account.
• To send transactional email related to your account: sign-in magic links, email verification on signup, password-reset links, and account notifications you have opted into.
• To detect and prevent abuse, spam, and unauthorized access.
• To comply with legal obligations.

We do not send marketing email, sell our user list, rent it, or share it with third-party advertisers.

3. Third-party services

We use a small number of vendors to operate the Service. Each only receives the data needed for its function:

• Vercel Inc. — web hosting, CDN, request logs.
• Cloudflare Inc. — DNS, edge security, DDoS protection.
• Amazon Web Services (Amazon SES) — outbound email delivery for authentication and transactional mail.
• hCaptcha (Intuition Machines, Inc.) — bot detection on the signup form.

4. Data retention

We retain account information for as long as your account is active. When you delete your account, we delete the associated personal data within 30 days, except where retention is required by law or for legitimate fraud-prevention purposes.

5. Your rights

• Access — request a copy of the personal data we hold about you.
• Correction — update inaccurate data via your account settings or by contacting us.
• Deletion — delete your account (a one-click action in account settings) which removes your personal data per section 4.
• Portability — request an export of your content.

To exercise any of these rights, contact us at the email below.

6. Security

We use industry-standard safeguards including TLS in transit, encrypted storage at rest, passwordless magic-link authentication (no stored passwords), and least-privilege access. No system is perfectly secure; we encourage you to use a unique email address you control.

7. Children

OG Life is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us their information, contact us and we will delete it.

8. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced on the Service and the effective date above will be updated.

9. Contact

BM Distribution LLC
Privacy inquiries: privacy@oglife.app
General contact: support@oglife.app