Draft for review. This document is standard SaaS boilerplate tailored to DueClarity. David should review with legal counsel before treating it as final.

Privacy Policy

Effective June 24, 2026

1. What we collect

DueClarity collects information you provide directly: your email address and password when you create an account, the AR aging data you upload (invoice numbers, customer names, amounts, due dates), and any notes or actions you log within the platform. We also collect standard server logs (IP address, browser type, pages visited) for security and performance monitoring.

2. How we use your data

Your data is used solely to provide the DueClarity service — to analyze your accounts receivable, generate insights, and display your dashboard. We do not sell your data, share it with advertisers, or use it to train machine learning models. We do not use your data to benchmark against other accounts.

3. Data storage and security

Your data is stored on AWS (us-east-1) via Supabase, which holds SOC 2 Type II certification. Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Each account is row-level isolated — no other account can access your data.

4. Data retention

We retain your data for as long as your account is active. If you cancel, your data is retained for 30 days and then permanently deleted. You may request immediate deletion by emailing hello@dueclarity.com — we will action it within 5 business days.

5. Third-party services

DueClarity uses Supabase for database and authentication, and Stripe for payment processing. These providers have their own privacy policies and security certifications. We do not share your AR data with any of these providers beyond what is necessary to operate the service.

6. Your rights

You may request a copy of your data, correction of inaccurate data, or deletion of your account and all associated data at any time by emailing hello@dueclarity.com. For users in the EU or UK, you have additional rights under GDPR and UK GDPR respectively.

7. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

8. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or by displaying a notice in the application. Continued use of DueClarity after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Email us at hello@dueclarity.com.