The complete React library for crafting memorable UI

This Privacy Policy describes how React Bits Pro ("we", "us", or "our") collects, uses, and protects your personal information when you use our website at pro.reactbits.dev, our documentation, our license authenticated registry, the Landing Builder, and related services (the "Service").

We are the data controller for the personal data described here. You can reach us at pro@reactbits.dev for any question about this policy or to exercise the rights in Section 6.

1. Information We Collect

1.1 Information You Provide

When you use our Service, you may provide us with:

Account Information: Email address when you create an account or sign in via Google OAuth or magic link.
Payment Information: When you purchase a license, payment is processed by Polar.sh. We do not store your credit card details.
License Information: Your license key, tier, and license status, so we can verify what you have access to.
Saved Items: If you save or favorite a component, block, App UI block, template, or Agent Kit item, we store which item you saved against your email address so your saved list follows you between devices.
Communication Data: Information you provide when contacting us for support.

1.2 Registry and Download Activity

Our components, blocks, App UI blocks, templates, and Agent Kit content are delivered through a registry that requires a valid license key. Each request to that registry is recorded, including when the request is made on your behalf by a CLI, an editor, or an AI coding agent. We log:

The license key used and the email address associated with it.
Which item was requested, and the request path and time.
IP address, user agent, and the approximate location (country, region, and city) derived from that IP address. We do not use precise or device-level location data.

We use this to confirm your entitlement, to operate and debug the registry, to understand which items are used, and to detect license key sharing and other unauthorized access. This record is what allows us to enforce our License Agreement, and we consider it necessary to protect the Service against piracy.

1.3 Information Collected Automatically

When you visit our website, we may automatically collect:

Usage Data: Pages visited, time spent, and interactions with the Service via Vercel Analytics.
Device Information: Browser type, operating system, and device identifiers.
Log Data: IP address, access times, and referring URLs.

1.4 Information Stored on Your Device

Some information is kept in your browser's local storage and is never sent to us:

Interface preferences, such as your chosen package manager, styling variant, and list or grid view mode.
Your recent searches in the documentation search dialog.
Any drafts you create in the Landing Builder. Builder drafts are stored only on your device. We do not upload, read, or back them up.
Any image or name you set on your profile card, which stays on your device.

Clearing your browser storage removes all of this permanently.

1.5 What We Do Not Collect

We do not collect the contents of your codebase, the projects you build with the Product, or anything an AI agent produces for you. We do not receive or store payment card details. We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects for you.

2. How We Use Your Information

We use the collected information for the following purposes:

To provide and maintain access to your purchased license
To authenticate your account and verify license ownership
To send transactional emails (purchase confirmations, magic links via Supabase)
To send occasional product updates and announcements (you can unsubscribe anytime)
To respond to your inquiries and provide customer support
To improve our Service and develop new features
To detect and prevent fraud or unauthorized access
To verify entitlement to registry content and to detect license key sharing, resale, or other breaches of our License Agreement
To keep your saved items available across your devices
To meet our accounting, tax, and other legal obligations

3. Legal Basis for Processing

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR:

Performance of a contract: to give you access to what you purchased, to authenticate you, to verify your license, and to provide support.
Legitimate interests: to secure the Service, to detect and prevent license key sharing and piracy, to understand how the Service is used, and to improve it. We balance these against your interests, and limit registry logs to what is needed for that purpose.
Legal obligation: to keep purchase and tax records for the period required by law.
Consent: for optional product announcements, which you can withdraw at any time by unsubscribing or contacting us. Withdrawing consent does not affect processing carried out before withdrawal.

4. Third-Party Services

We use trusted third-party services to operate our business. These services may have access to your personal information only to perform specific tasks on our behalf:

Supabase

Authentication, database, and file storage. Stores your account, license record, saved items, registry usage logs, and downloadable template files.

Polar.sh

Payment processing, license key issuance, and the affiliate program. Handles all payment transactions securely.

Vercel

Hosting and analytics. Provides website hosting and aggregate, cookieless usage analytics.

Google OAuth

Authentication. Allows you to sign in with your Google account. We receive only your email address.

We do not sell, rent, or trade your personal information, and we do not share it with third parties for their own marketing. We may disclose information where required by law, or where necessary to establish, exercise, or defend a legal claim, including enforcement of our License Agreement.

5. Data Retention

We keep personal data only for as long as we need it:

Account and license records: for as long as your license is valid. Because lifetime licenses do not expire, we retain those records indefinitely so that access continues to work. For annual subscriptions, we retain the record while the subscription is active and for a reasonable period afterwards so it can be renewed or restored.
Registry usage logs: up to 24 months, after which they are deleted or aggregated so they no longer identify you.
Saved items: until you remove them or delete your account.
Support correspondence: up to 24 months after the matter is closed.
Purchase and invoice records: for the period required by applicable tax and accounting law, typically ten years.

You may request deletion of your account and associated data at any time by contacting us. Deleting your account ends registry access, and we may need to retain a minimal record of the purchase to meet the legal obligations above.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate personal data.
Deletion: Request deletion of your personal data.
Restriction: Ask us to limit how we use your data while a question about it is resolved.
Objection: Object to processing we carry out on the basis of legitimate interests, including our registry usage logging.
Withdraw consent: Withdraw any consent you have given, at any time.
Opt-out: Unsubscribe from marketing communications at any time.
Portability: Request a portable copy of your data.

To exercise any of these rights, please contact us using the information provided below. We will respond within one month. We do not charge for this, and we will not treat you differently for asking.

If you are in the European Economic Area or the United Kingdom and believe we have not handled your data properly, you have the right to complain to your local data protection supervisory authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP). We would appreciate the chance to address your concern first.

7. Cookies and Local Storage

We use essential cookies to maintain your session and authentication state. These are required for signing in and cannot be turned off without breaking access to your account.

We also use Vercel Analytics to understand how visitors use our website. It reports in aggregate and does not use cookies to identify you across sites.

Separately, we use your browser's local storage for the preferences and drafts described in Section 1.4. That information stays on your device and is not transmitted to us.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data is transmitted over HTTPS, and sensitive information is encrypted at rest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

If a breach affecting your personal data occurs and is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, you, without undue delay.

9. International Transfers

Your information may be transferred to and processed in countries other than your own. Our service providers (Supabase, Vercel, Polar.sh, Google) may store data in the United States or other jurisdictions. Where data is transferred outside the European Economic Area, we rely on the safeguards those providers have in place, such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date, and where the change materially affects how we use your data, by email. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: pro@reactbits.dev