Privacy Policy

This policy explains what we collect and how we use it.

What we collect

• Account data: Google OAuth profile (name, email, avatar) when you sign in.
• Business data you enter: business name, contacts, contract text, invoice line items, payment records.
• Technical data: IP address and user agent for security and audit purposes.

What we do with it

• Run the service for you.
• Send you transactional email (sign-in, payment reminders, receipts).
• Secure the platform against abuse.

What we do NOT do

• We do not sell your data.
• We do not use your data to train AI models.
• We do not share your data with third parties except:
  • Infrastructure providers (hosting, email delivery) strictly to run the service.
  • When required by Philippine law.

Data portability

You can export your entire workspace as JSON at any time from Settings > Data.

Data deletion

You can delete your account at any time. On deletion, we remove your data within 30 days from active systems and within 90 days from backups.

Cookies

We use a single session cookie for authentication. No analytics or tracking cookies in beta.

Contact

Privacy questions? /contact.