Privacy Policy

Information We Collect

We collect information you provide directly and information generated through your use of our services.

• Account information: your email address and any optional profile details you provide
• HR data you enter: employee records, PTO balances, certification details, and other information you add to the platform
• Documents you generate: offer letters, verification letters, job descriptions, and other HR documents created using our tools
• Usage data: pages visited, features used, and interactions with the service
• Device and browser information: IP address, browser type, operating system, and referring URL

How We Use Your Information

We use your information to:

• Provide and maintain our HR tools and services
• Send you alerts, notifications, and service-related communications
• Process waitlist sign-ups and notify you when new features launch
• Improve and develop new features based on usage patterns
• Respond to support requests and inquiries
• Comply with legal obligations

Lawful Basis for Processing

We process your personal data under the following legal bases:

• Contract performance: processing necessary to provide the service you signed up for, including account management, HR tools, and notifications.
• Legitimate interests: improving our services, preventing fraud, and ensuring security.
• Consent: where you have opted in to marketing communications or optional features. You may withdraw consent at any time.
• Legal obligation: where we are required to process data to comply with applicable laws.

Third-Party Services

We use the following third-party services to operate:

• Hosting and infrastructure: AWS — provides cloud hosting and data storage
• DNS and edge network: Cloudflare — provides CDN, DNS, and edge computing
• Email delivery: Mailgun — sends transactional and notification emails
• Analytics: Plausible Analytics — privacy-focused, cookie-free analytics
• Payment processing: Stripe — handles subscription billing (when applicable)

Data Storage and Location

Your data is stored on servers located in the United States, operated by Amazon Web Services (AWS).

If you are located outside the United States, your data will be transferred to and processed in the US. By using our service, you consent to this transfer.

Cookies and Analytics

We use Plausible Analytics, a privacy-focused analytics tool that does not use cookies and does not track individual users across sites.

We use a single cookie to remember your cookie consent preference. No tracking cookies, advertising cookies, or third-party cookies are used.

See our Cookie Policy for full details.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. HR data you enter is stored securely and accessible only to your account.

Data Retention

We retain your account information and HR data for as long as your account is active.

After account cancellation, your data is retained for 30 days and then permanently deleted. Account information (email, billing records) is retained for up to 12 months to comply with financial record-keeping requirements, then deleted.

You may request deletion of your data at any time by contacting us.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data
• Right to restrict processing: request that we limit how we use your data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: where processing is based on consent

Contact Us

If you have questions about this privacy policy or your personal data, contact us at hello@useboring.com.