Privacy Policy

Last updated: October 2026

DocRenewal (“we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the DocRenewal platform (the “Service”). This policy is designed to comply with applicable privacy laws, including the GDPR (Europe), CCPA/CPRA (California, USA), the Australian Privacy Act, and Canadian privacy laws (PIPEDA and provincial equivalents).

1. Information We Collect

We collect the following types of information:

  • Account information: Name, email address, company name, and password when you create an account.
  • Customer data: Contracts, documents, renewal dates, and other content you upload or enter into the Service.
  • Usage data: IP address, browser type, device information, pages visited, and how you interact with the Service.
  • Payment information: If you subscribe to a paid plan, payment details are processed by our payment provider. We do not store full credit card numbers.

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Service.
  • Send reminders and notifications related to your contracts.
  • Process payments and manage subscriptions.
  • Improve the Service and develop new features.
  • Communicate with you about your account or the Service.
  • Comply with legal obligations.

3. Legal Bases (GDPR)

Where GDPR applies, we process personal data based on:

  • Contract: To provide the Service you signed up for.
  • Legitimate interests: To improve the Service and ensure security.
  • Consent: Where required, such as for certain marketing communications.
  • Legal obligation: Where we must comply with the law.

4. Sharing Your Information

We do not sell your personal data. We may share information with:

  • Our infrastructure provider, Railway, which hosts the Service in the United States.
  • Payment processors, such as Stripe.
  • Email and notification providers.
  • Service providers who help us operate the Service and are subject to confidentiality obligations.
  • Authorities when required by law.

5. International Data Transfers

The Service is hosted in the United States. If you are located in the EU, UK, Australia, or Canada, your data may be transferred to and processed in the United States. We rely on appropriate safeguards for such transfers, including standard contractual clauses where required under GDPR.

6. Data Retention

We keep your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and data. We will delete or anonymize your data within a reasonable time, unless we are required to retain it for legal reasons.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data or request deletion of your data.
  • Restrict or object to certain processing.
  • Request data portability or withdraw consent where processing is based on consent.
  • Lodge a complaint with a supervisory authority.

EU and UK users may contact their local data protection authority. California residents have rights under the CCPA/CPRA, including the right to know, delete, and opt out of the sale of personal information; we do not sell personal information. Australian users may request access or correction under the Australian Privacy Principles. Canadian users have rights under PIPEDA and applicable provincial laws.

To exercise your rights, contact us at [email protected].

8. Security

We implement reasonable technical and organizational measures to protect your data, including encryption in transit and at rest. However, no method of transmission over the internet is 100% secure.

9. Cookies

We use essential cookies to operate the Service. We may also use analytics cookies to understand how the Service is used. You can control cookies through your browser settings.

10. Children’s Privacy

The Service is not intended for children under 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at [email protected].