Privacy Policy

• Account information — your name, business name, email address, and a one-way encrypted (hashed) password. We never store passwords in plain text.
• Renewal records you create — item names, expiry dates, categories, notes, responsible person, and reminder preferences.
• Uploaded documents — PDFs or images you choose to attach to your items, stored in our database in base64-encoded form and scoped to your workspace.
• Notification tokens — push-notification device tokens issued by Apple/Google, stored so we can deliver renewal reminders.
• Audit metadata — actions performed inside your workspace (created, edited, renewed, deleted, invited, joined) with timestamps and user name.
• Technical logs — request timestamps, IP addresses, and error logs used to keep the Service running.

• Provide the core reminder, tracking, and team features you signed up for.
• Send email and push notifications you have configured.
• Authenticate you and prevent unauthorized access.
• Diagnose, fix bugs, and improve performance.
• Comply with legal obligations when required.

We do not sell your personal data. We do not use your data to train AI models.

• Resend — sends transactional email (password reset, team invites, reminders).
• Apple Push / Firebase Cloud Messaging — relays push notifications to your device.
• Cloud hosting providers — host the database and API.

These providers process data only as needed to deliver the Service and are bound by their own security and privacy commitments.

We retain your data for as long as your account is active. Soft-deleted items remain in the database for up to 30 days for recovery, after which they are permanently removed. Backups may contain residual copies of deleted data for up to 30 additional days before they age out of our backup rotation.

You can delete your account at any time:

• Go to Settings → Delete account.
• If you are the workspace owner and the sole member, deleting your account also deletes the workspace and every related item, renewal record, file, audit entry, and invite.
• Workspace owners can also choose Settings → Delete workspace to permanently remove the entire workspace and every member.
• Account deletion is immediate within the live database; residual copies in backups are removed within 30 days.
• You may also email support@renewtracker.site to request deletion or to obtain a copy of your data.

Passwords are stored using a one-way bcrypt hash and are never stored in plain text. Connections to the Service are encrypted in transit. We apply reasonable security measures appropriate to the sensitivity of the data we hold. However, no system can guarantee 100% security. You are responsible for choosing a strong password, keeping it confidential, and notifying us promptly if you suspect compromise.

Depending on your jurisdiction, you may have rights to access, correct, export, restrict, or delete your personal data. To exercise these rights, contact us at support@renewtracker.site.

RenewTracker is intended for use by businesses and adults. We do not knowingly collect data from children under 16.

Privacy requests, complaints, and questions: support@renewtracker.site.