Privacy Policy

1. Information We Collect

We collect personal information you provide directly or through your use of our services, including:

• Account information (name, email, password, tenant/workspace details)
• Subscription and billing information (processed securely via Paddle)
• Service usage data (e.g., SAR requests, report metadata, tenant activity)
• Communication data (emails, support requests, report delivery)

2. How We Use Your Information

We use your information to:

• Provide and maintain ReportDSL and SAR Service functionality
• Manage subscriptions, billing, and account authentication
• Deliver emails such as account verification, receipts, and reports
• Respond to inquiries and provide customer support
• Improve and secure our services

We do not sell your personal data.

3. Cookies & Analytics

We use privacy-friendly analytics tools (e.g., Plausible, Fathom). These do not track you across websites or use invasive cookies.

4. Data Sharing

We only share your data when necessary:

• With Paddle (for subscription billing and payments)
• With Mailgun (for secure email delivery)
• With hosting and infrastructure providers
• To comply with legal obligations
• With your explicit consent

All third-party processors are bound by strict data protection agreements.

5. International Data Transfers

Some third-party providers (e.g., Paddle, Mailgun) may process data outside the UK/EU. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs).

6. Your Rights

If you’re in the UK, EU, or California, you have the right to:

• Access, update, or delete your data
• Withdraw consent at any time
• Request a copy of your data in portable format
• File a complaint with your local data authority

To exercise your rights, contact us at privacy@reportdsl.com.

7. Data Retention

We retain your data as long as necessary to provide the Service, manage subscriptions, and comply with legal obligations. After cancellation, we may delete or anonymize your data after a retention period, unless otherwise required by law.

8. Children’s Privacy

Our services are not intended for children under 16. We do not knowingly collect data from minors.

9. Updates to This Policy

We may update this Privacy Policy periodically. The “Last Updated” date at the top reflects the latest changes. If changes are material, we will provide notice (e.g., via email or dashboard).

10. Contact Us

If you have questions or concerns, contact us at: