Privacy Policy

1. Introduction

PolicyGen ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains:

• What information we collect
• How we use your information
• Your rights regarding your data
• How we protect your information

2. Information We Collect

2.1 Information You Provide

Data Type	Examples	Purpose
Account Information	Name, email, password	Account creation and authentication
Business Information	Company name, website, industry	Document customization
Payment Information	Credit card, billing address	Processing payments (via Stripe)
Document Data	Information entered in forms	Generating your documents
Communications	Support messages, feedback	Customer support

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent
• Device Information: Browser type, operating system, IP address
• Cookies: Small files stored on your device (see Cookie Policy)
• Analytics: How you interact with our Service

2.3 Information from Third Parties

If you sign up using Google or GitHub, we receive:

• Name and email address
• Profile picture (optional)
• No access to your passwords or private data

3. How We Use Your Information

3.1 Primary Uses

• Service Delivery: Generate documents, process forms, provide support
• Account Management: Create and maintain your account
• Payment Processing: Charge for services, handle refunds
• Communication: Send transactional emails, updates, support responses
• Improvement: Analyze usage to improve our Service
• Security: Detect fraud, prevent abuse, ensure platform security

3.2 Marketing (With Your Consent)

• Send newsletters about new features
• Promotional offers and discounts
• Product updates and tips

You can opt out at any time using the unsubscribe link in emails.

4. How We Share Your Information

4.1 Service Providers

Provider	Service	Data Shared
Stripe	Payment processing	Payment info, billing address
Google Analytics	Usage analytics	Anonymized usage data
Amazon AWS	Hosting & storage	All service data
SendGrid	Email delivery	Email address, name

4.2 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal processes (subpoenas, court orders)
• Protect our rights and property
• Prevent fraud or security threats
• Protect user safety

4.3 Business Transfers

If PolicyGen is acquired or merged, your information may be transferred to the new entity.

5. Data Retention

We retain your information for as long as necessary to provide services:

• Active accounts: Data retained while account is active
• Deleted accounts: Most data deleted within 30 days
• Legal requirements: Some data retained for tax/legal compliance (typically 7 years)
• Backups: May persist in backups for up to 90 days

6. Your Rights

6.1 GDPR Rights (EU Users)

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Erasure: Request deletion ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to data processing
• Withdraw Consent: Opt out of marketing

6.2 CCPA Rights (California Users)

• Know: What personal information we collect
• Delete: Request deletion of your data
• Opt-Out: We don't sell data (nothing to opt out of)
• Non-Discrimination: Equal service regardless of privacy choices

6.3 How to Exercise Your Rights

Email us at [email protected] with your request. We'll respond within 30 days.

7. Data Security

We implement industry-standard security measures:

• Encryption: SSL/TLS for data in transit
• Secure Storage: Encrypted databases
• Access Controls: Limited employee access
• Regular Audits: Security assessments and updates
• Payment Security: PCI-DSS compliant via Stripe

8. Cookies and Tracking

8.1 Types of Cookies We Use

• Essential Cookies: Required for service functionality (login, security)
• Analytics Cookies: Help us understand usage (Google Analytics)
• Preference Cookies: Remember your settings
• Marketing Cookies: Track ad effectiveness (with consent)

8.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect service functionality.

9. Children's Privacy

PolicyGen is not intended for users under 18. We do not knowingly collect data from children. If you believe we have collected data from a minor, contact us immediately.

10. International Data Transfers

PolicyGen is based in the United States. If you access our Service from outside the US:

• Your data may be transferred to and stored in the US
• We comply with applicable data protection laws
• We use standard contractual clauses for EU transfers

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for their privacy practices. Review their privacy policies before providing information.

12. Changes to This Policy

We may update this Privacy Policy periodically. We'll notify you of significant changes via:

• Email notification
• Notice on our website
• In-app notification

Continued use after changes constitutes acceptance.

13. Data Protection Officer

For privacy-related inquiries, contact our Data Protection Officer:

Email: [email protected]

14. Complaints

If you believe we've mishandled your data, you have the right to lodge a complaint with your local data protection authority:

• EU: Your local supervisory authority
• US (California): California Attorney General
• UK: Information Commissioner's Office (ICO)