Draft for attorney review. Replace the bracketed items and have a lawyer approve this page before you accept paying customers.

Privacy Policy

Effective [DATE]

This policy explains how Your Company LLC (“we”) handles information in Closing Desk. Our customers are businesses (settlement and title agencies). When an agency enters information about its own clients, we process it on the agency’s behalf and under its instructions.

Information we collect

• Account information: name, email address and password (stored only in hashed form) for each user.
• Customer Data: what agencies enter about closing files, such as property addresses, names of buyers, sellers, lenders and agents, dates, amounts, notes and checklist progress.
• Billing information: collected and handled by Stripe, which sells the subscription as merchant of record. We receive the billing name, address and subscription status, never full card numbers. Stripe’s own privacy policy covers the information it collects at checkout.
• Technical information: IP addresses, browser type and logs our hosting providers collect to operate and secure the Service.

How we use it

• To provide, maintain, secure and support the Service.
• To send account emails such as confirmations, password resets, invitations and billing notices.
• To comply with law and enforce our Terms.

We do not sell personal information, use Customer Data for advertising, or share it except as described here.

Service providers

We use these providers to run the Service, each bound by confidentiality and security obligations:

• Supabase: database and user authentication
• Vercel: application hosting
• Stripe: payments, sales tax and subscription billing (as merchant of record)
• Resend: delivery of account emails

Security

We use encryption in transit and at rest, database-level separation between agencies, role-based access, and activity logging. See our Security page for details. No system is perfectly secure; we will notify affected customers of a security incident involving their data as required by law.

Retention

We keep Customer Data while the agency’s account is open. After an account is closed, we delete it within [90] days, except for backups, which are overwritten on their normal schedule, and records we must keep by law.

Your choices

Users can update their account details and ask to delete their account by emailing us. Individuals whose information an agency stored should contact that agency, and we will help the agency respond.

Children

The Service is for businesses and is not directed to children under 13.

Changes and contact

We will post changes here and update the effective date. Questions: support@example.com, [MAILING ADDRESS].