Privacy Policy | Termedora

Termedora is operated by Jagganaut Limited, a company incorporated in New Zealand (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, and protect your personal information when you use Termedora (“Service”).

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information you provide

Account information: Your name, email address, and password when you register
Organisation details: Your organisation name and any information you enter when setting up your workspace
Contract data: Vendor names, renewal dates, contract values, and any documents you upload
Notification preferences: Email addresses, Slack webhook URLs, or phone numbers you configure for reminders
Billing information: Payment details processed by Stripe (we do not store full card numbers)

1.2 Information collected automatically

Usage data: Pages visited, features used, and actions taken within the Service
Log data: IP address, browser type, operating system, and timestamps of requests
Email engagement: Whether notification emails were delivered, opened, or clicked (via Resend)

1.3 Information from third parties

Stripe: Subscription status, payment confirmation, and customer ID

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the Service
Send renewal reminder notifications on your behalf
Process payments and manage your subscription
Respond to support requests and communicate with you about your account
Send transactional emails (e.g., invite emails, billing receipts)
Monitor for security issues and prevent fraud or abuse
Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

3. How We Share Your Information

We share your information only as necessary to operate the Service, with the following categories of recipients:

Supabase — database and file storage (your contract data and uploaded documents are stored here)
Stripe — payment processing (billing and subscription management)
Resend — transactional email delivery (renewal reminders and account emails)
Vercel — application hosting and infrastructure
Upstash — rate limiting (request metadata only, no personal data stored)

We may also disclose your information if required by law, regulation, or legal process, or to protect the rights, safety, or property of Jagganaut Limited or others.

4. Data Storage and Security

Your data is stored on servers operated by Supabase and Vercel. We implement industry-standard security measures including:

Encryption in transit (HTTPS/TLS)
Encryption at rest for stored data
Row-level security policies to ensure users can only access their own data
Access controls limiting which systems can query the database

While we take reasonable precautions, no system is completely secure. We cannot guarantee the absolute security of your information.

5. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription or request account deletion, we will delete your data within 30 days, except where we are required to retain it for legal or accounting purposes (e.g., billing records may be kept for up to 7 years as required by New Zealand law).

6. Your Rights

Under the New Zealand Privacy Act 2020 and applicable data protection laws, you have the right to:

Access — request a copy of the personal information we hold about you
Correction — request correction of inaccurate or incomplete information
Deletion — request deletion of your account and personal data
Portability — request your contract data in a machine-readable format
Objection — object to certain uses of your information

To exercise any of these rights, contact us at support@termedora.com. We will respond within 20 working days.

7. Cookies

We use cookies and similar technologies to maintain your session and authentication state. These are strictly necessary for the Service to function. We do not use third-party advertising cookies or tracking cookies. You can disable cookies in your browser settings, but this will prevent you from logging in.

8. Children’s Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

9. International Transfers

Your data may be stored and processed in countries outside New Zealand, including the United States, where our infrastructure providers (Supabase, Vercel, Stripe, Resend) operate. By using the Service, you consent to this transfer. We take reasonable steps to ensure that your data is protected in accordance with this Privacy Policy regardless of where it is processed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice before they take effect. The “Effective date” at the top of this page will always reflect the most recent version.

11. Contact

For privacy-related questions, requests, or complaints, contact us at: support@termedora.com

Jagganaut Limited, New Zealand

If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner of New Zealand.