Your data is yours.

When you create a RECsy profile: your name, email, and profile photo from your signed-in account via Clerk, when provided. When you leave a recommendation: your name and photo snapshot from your signed-in account — never your email address. We also record an anonymised, salted hash of your IP address for anti-fraud purposes. We never store raw IP addresses.

We never sell your data. We never post to your signed-in account. We never show your email address to anyone — not even the provider you recommended. Recommendations can only be left voluntarily by signing in.

Authentication is handled by Clerk. We use OAuth providers such as Google and Facebook — we store no passwords. Clerk’s privacy policy applies to the auth flow.

Your name and photo, when provided by your sign-in provider, appear publicly on the provider’s page. You can request removal at any time by emailing us. We enforce one recommendation per signed-in account per provider — this dedup record is retained to prevent fraud.

We use privacy-respecting analytics (PostHog, when enabled) and Sentry for error monitoring. No third-party ad tracking pixels are used.

Questions? Email privacy@recsy.io. We’ll respond within 5 business days.