Privacy Policy

Entrig helps customers send and manage push notifications for apps built with Supabase. This policy explains what personal information we collect, how we use it, and how we handle customer data processed through the service.

Last updated: April 26, 2026

1. Scope

This Privacy Policy applies to information collected through the Entrig website, documentation, product, and related services. In this policy, "Entrig," "we," "our," and "us" refer to Entrig.

2. Information we collect

We may collect and process the following categories of information:

  • Account and contact information: email address and other information you provide when signing up, requesting access, booking a demo, or contacting us.
  • Customer data processed on your behalf: information you submit to configure and send notifications, such as project configuration, recipient or device identifiers, notification content, trigger settings, and delivery or execution logs.
  • Integration credentials and access tokens: credentials you provide so Entrig can deliver notifications and integrate with your infrastructure, including FCM service account keys, APNs certificates or keys, and Supabase OAuth access and refresh tokens.
  • Usage and device information: IP address, browser type, pages viewed, timestamps, and similar diagnostic or analytics data about how the website and service are used.
  • Support and communications: information included in emails, support requests, or other messages sent to us.
  • Cookies and similar technologies: we use cookies and local storage for authentication, security, analytics, and product functionality.

3. How we use information

Information about you (the Entrig customer). We use account, contact, and usage information to:

  • provide, operate, maintain, and improve Entrig;
  • authenticate users and manage access to accounts;
  • monitor performance, troubleshoot issues, and protect the service;
  • communicate about accounts, updates, security notices, and support; and
  • comply with legal obligations and enforce our terms.

Customer data and end-user data processed on your behalf. We use the data you submit through Entrig (such as notification configuration, recipient identifiers, device tokens, and notification content) only to deliver and operate the notifications you configure. We do not access your Supabase database beyond what is required to set up and operate the triggers and notifications you configure, and we do not use customer data or end-user data for our own purposes, including training machine learning models, profiling, advertising, or marketing.

4. Customer data and end users

When customers use Entrig to send notifications to their own users, we generally act as a service provider or processor on the customer's behalf. The customer controls the notification data they submit to Entrig, including whether that data contains personal information.

If you are an end user receiving notifications from one of our customers, you should contact that customer directly for privacy requests relating to that data.

To deliver notifications, Entrig also receives device identifiers (such as FCM and APNs device tokens) registered through our customers' applications. These identifiers are used to route notifications to the correct device.

5. How we share information

We do not sell personal information. We may share information:

  • with infrastructure and service providers that help us operate Entrig, including Supabase (hosting and database), Google Firebase Cloud Messaging (Android and web notification delivery), Apple Push Notification service (iOS notification delivery), Upstash (retry queue and rate limiting), Google Firebase Hosting (web hosting for our application and marketing site), and PostHog (product analytics, including usage events and diagnostic data to understand how the service is used);
  • when required by law, regulation, legal process, or government request;
  • to protect rights, safety, security, or prevent fraud or abuse; and
  • in connection with a merger, acquisition, financing, or other corporate transaction.

6. Data retention

We retain account information, project configuration, and delivery logs for as long as your project is active and as needed to provide the service, maintain security and operational records, resolve disputes, and comply with legal obligations. If you stop using the service or close your account, you can contact us at the address below to request deletion of your data, and we will remove it except where we are required to keep certain records by law.

7. Security

We use reasonable technical and organizational measures designed to protect personal information, including access controls, encryption in transit, encryption at rest for sensitive credentials and access tokens (using AES-GCM), hashing of API key secrets before storage, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International processing

Entrig and its service providers may process information in the United States and other countries. Those countries may have data protection laws different from the laws where you are located.

9. Your choices and rights

Depending on where you are located, you may have rights to access, correct, delete, or object to certain processing of your personal information. To make a request, contact us using the details below. We may need to verify your identity before completing the request.

10. Third-party services

Our website and service may link to or work alongside third-party services. Those services have their own terms and privacy policies, which govern your interactions with them.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the "Last updated" date.

12. Contact

For questions or privacy requests, contact us at team@entrig.com.

Entrig