Privacy Policy

1. Introduction

PennyHacker LLC ("we", "us", or "our") operates DeadlineGuard. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you register, we collect your name, email address, and company name. If you subscribe to a paid plan, payment processing is handled by Stripe — we do not store credit card numbers.

2.2 Usage Data

We automatically collect information about your interaction with the Service, including pages visited, features used, and timestamps. This data helps us improve the Service.

2.3 Compliance Data

You may upload compliance items, deadline information, evidence files, and notes. This data is stored in your tenant workspace and is not accessed by us except to provide the Service or as required by law.

2.4 Cookies and Tracking

We use essential cookies for authentication and session management. We use Azure Application Insights for performance monitoring and error tracking. We do not use advertising cookies or third-party trackers.

3. How We Use Your Information

• To provide and maintain the Service.
• To send compliance deadline reminders and overdue notifications.
• To process payments and manage subscriptions.
• To send important service updates (e.g., security alerts, terms changes).
• To monitor and improve Service performance and reliability.
• To respond to support requests.

We do not use your data for advertising, profiling, or selling to third parties.

4. Data Sharing

We may share your information only in the following circumstances:

• Service Providers: We use Microsoft Azure (hosting, storage, monitoring), Stripe (payments), and Brevo (email delivery). If a workspace Owner or Admin connects Slack or Microsoft Teams, deadline titles and due dates are sent to the selected channel through that provider. These providers receive the data needed to deliver their services. Contact us for information about their processing terms and locations.
• Legal Requirements: We may disclose information if required by law, court order, or government request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data is encrypted in transit using TLS 1.2+.
• Data at rest is encrypted using Azure's built-in encryption.
• Access to data is restricted through role-based access controls and multi-tenant isolation.
• We use Azure Key Vault for secret management.
• Regular security reviews and dependency updates.

6. Data Retention

Canceling a subscription does not automatically delete your workspace. If you cancel a paid subscription, product access continues through the current paid period. After access ends, active workspace Owners and Admins may still download a private archive of records, history, and evidence in Settings. We currently retain workspace and account information until we process a verified deletion request, subject to applicable legal, accounting, security, and dispute requirements.

To request deletion, email privacy@deadlineguard.biz from your account address. We verify ownership and discuss the scope before deleting active data. Residual backups follow the cloud provider's backup lifecycle; legal or security records may need to be retained for longer where required. We do not promise automatic deletion on a particular date after cancellation.

7. Multi-Tenancy and Data Isolation

DeadlineGuard is a multi-tenant application. Your data is logically isolated from other tenants through application authorization checks and tenant-scoped database queries. Each organization's data is accessible only to members of that organization.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data (subject to legal retention requirements).
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.

To exercise these rights, contact privacy@deadlineguard.biz.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. International Data Transfers

Our production workspace storage is configured in the United States. Email, payment, and monitoring providers may process information in other locations. Where applicable law requires a specific mechanism for international transfers, we will use that mechanism.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

If you have questions about this Privacy Policy, contact us at: