Privacy policy

1. Who we are

RenewOps ("we", "our", "the service") is a renewal and expiration tracking tool operated as an independent product. Our website is renewops.app. For any privacy-related questions, contact us at support@renewops.app.

2. What data we collect

We collect only what is necessary to operate the service:

• Account data: Your email address, collected at registration via Supabase Auth. Used to identify your account and send reminders.
• Display name: Optional. You may set a display name in Settings. Stored in your workspace profile.
• Workspace records: Titles, types, dates, owners, tags, notes, and attachment URLs you enter. Stored in our database and scoped to your account.
• Settings and preferences: Reminder offsets, expiration thresholds, plan tier. Used to personalise the service.
• Activity log: Actions performed on records (created, updated, archived). Stored to provide audit history within your workspace.
• Usage analytics: Page views and anonymised interaction events (e.g. filters used, records created) collected via Google Analytics 4. No personally identifiable data is sent to Google Analytics.
• Technical data: IP address, browser type, and request timestamps processed by Vercel (our hosting provider) for security and performance purposes. We do not store these ourselves.

3. How we use your data

• To authenticate you and maintain your workspace session.
• To store and display your renewal records.
• To send email reminders when records are approaching expiration (via Resend).
• To improve the product through anonymised usage analytics.
• To respond to support requests you initiate.

We do not sell your data, share it with advertisers, or use it for any purpose other than operating this service.

4. Third-party processors

We use the following sub-processors to operate the service:

All processors operate under their own privacy policies and data processing agreements.

5. Cookies

We use two categories of cookies:

• Essential cookies: Set by Supabase to maintain your authenticated session. These are required for the service to function and do not require consent.
• Analytics cookies: Set by Google Analytics to measure anonymised usage. These are non-essential and are only loaded after you accept cookies.

You can withdraw consent at any time by clearing your browser cookies or adjusting your preferences via the cookie banner.

6. Data retention

• Your workspace data is retained for as long as your account is active.
• If you delete a record, it is removed from our database immediately.
• If you request account deletion, all associated data (records, settings, activity log) is permanently deleted within 30 days.
• Anonymised analytics data in Google Analytics is retained for 14 months.

7. Your rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under GDPR:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct inaccurate data directly in your workspace settings.
• Erasure: Request deletion of your account and all associated data.
• Portability: Export your records at any time using the CSV export feature.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw analytics consent at any time via the cookie banner.

To exercise any of these rights, email us at support@renewops.app. We will respond within 30 days.

8. Data security

We implement industry-standard security measures including row-level security on all database tables, encrypted connections (TLS), secure authentication via Supabase Auth, and security headers on all responses. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy as the service evolves. Material changes will be communicated via email or an in-app notice. The "last updated" date at the top of this page reflects the most recent revision.

10. Contact

For any privacy questions or data requests, contact us at support@renewops.app.