Marketing site + legal + GDPR tooling
Public landing at /, pricing, features, legal (terms / privacy / DPA / cookies). One-click account delete and data export from Settings → Account.
Built in public. New features and fixes, most recent first.
Public landing at /, pricing, features, legal (terms / privacy / DPA / cookies). One-click account delete and data export from Settings → Account.
7 branded email templates: welcome, payment receipt, payment failed, quota 80% warning, quota exceeded, trial ending (5d and 1d). React Email composed into one shared layout.
Free / Starter €29 / Pro €99 plans with 14-day trial. Hosted Checkout, Stripe Tax, customer portal, idempotent signature-verified webhook. Double-locked quota: TS + Postgres RPC both reject over-limit writes.
Figma integration retired — all figma-sync code, plugin folder and the figma_sync_queue table are gone. Server-side Skia renderer is the forward direction.
Integrations page now stores creds in Vault via SECURITY DEFINER RPCs. Cross-tenant read + write blocked at the database layer; verified by e2e tests.
Full auth flow with email verification via Supabase, PKCE code exchange at /auth/confirm, proxy-layer rate limits on login.
Every tenant-scoped table now carries workspace_id. RLS policies enforce `is_workspace_member` at the database layer. Signup trigger auto-creates a personal workspace.