Privacy Policy

1. Information we collect

• Account information: your name, email address, company name, and login details (including Google sign-in if you use it).
• Information you add: employees' names and email addresses, requirements, expiration dates, responsible people, and notes.
• Documents: files you or your employees upload, such as certificates, licenses and insurance documents. These may contain personal information.
• Billing information: handled by Stripe. We see your plan and payment status, but we never see or store your full card number.
• Technical information: basic logs such as IP address, browser type and error messages, used to keep the service secure and working.

2. How we use it

• To run DueLantern: store your data, track expiration dates, and show your dashboard.
• To send emails you asked for: reminders, overdue alerts, team invites, and account emails.
• To read expiration dates from uploaded documents using AI.
• To process payments, provide support, prevent abuse, and fix problems.

3. AI document reading

When you ask DueLantern to read a document, the file is sent to OpenAI to find details like the expiration date. Under OpenAI's API terms, data sent this way is not used to train their models by default. A person on your team always reviews the result before it is saved.

4. Who we share information with

We share information only with providers that help us run the service:

• Supabase: database, file storage and login
• Vercel: website hosting
• OpenAI: AI document reading
• Resend: sending emails
• Stripe: payments
• Google: sign-in, if you choose "Continue with Google"

We may also share information if the law requires it, or to protect the rights and safety of our users. We do not sell personal information and we do not use it for advertising.

5. Employees and other people in an account

Businesses that use DueLantern decide which employees and documents to add. If you are an employee and have questions about your information, please contact your employer first. We will help them respond to your request.

6. Cookies and local storage

We use your browser's storage only to keep you logged in. We do not use advertising or tracking cookies.

7. How long we keep information

We keep your information while your account is open. When an owner deletes a company from the Export & delete page, we permanently delete its employees, requirements, documents, uploaded files and team logins. Copies in our providers' backups are removed on their normal schedule. Stripe keeps billing records as required by law.

8. Security

We protect your data with encrypted connections, private file storage, and access rules that keep each company's data separate. No system is perfectly secure, so please use a strong password and keep it private.

9. Your choices

• You can view and update your information in the app at any time.
• You can download your data from the Export & delete page.
• The account owner can permanently delete the company and its data.
• You can ask us to access, correct or delete your personal information by emailing us.

10. Children

DueLantern is a tool for businesses and is not directed to children under 13. We do not knowingly collect information from children under 13.

11. Changes to this policy

If we make important changes, we will email account owners or show a notice in the app. The effective date at the top always shows the latest version.