Privacy Policy | Privatly

Who We Are

Privatly ("we," "our," or "us") is a software-as-a-service (SaaS) web application operated from the United States. We provide tools and services to help users generate privacy policies and related legal documents. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website, application, and services (collectively, the "Service").

Information We Collect

We collect several categories of information to operate our Service, improve your experience, and comply with legal obligations.

Names and Identifiers

Your full name, username, or any other identifiers you provide when creating or updating your account

Email Addresses

Your email address, used for account creation, communication, and account recovery

Payment and Billing Information

Billing name, address, and invoice details
Transaction history and subscription status
Your payment card details are collected and processed exclusively by our payment processor, Stripe — we never receive or store your full card number

Usage and Behavioral Data

Information about how you interact with the Service, including features accessed, documents created, forms completed, and time spent on the platform
Device and browser information (IP address, browser type, operating system)
Pages visited and actions taken within the Service

User-Generated Content

Any documents, text, responses, or other content you submit through the Service in order to generate your privacy policy or related documents
This content is processed to deliver the Service and may be sent to our third-party service providers as described below

Cookies and Similar Tracking Technologies

Session identifiers and authentication tokens
Preferences and settings you establish

How We Collect Information

Direct Input: Information you voluntarily provide when you create an account, update your profile, enter billing information, or submit content through our Service
Automated Collection: We automatically collect certain information through cookies and similar technologies when you access or use the Service
From Third Parties: We receive information from our payment processor and other service providers as necessary to provide and improve the Service

How We Use Your Information

Service Delivery: To create and maintain your account, process payments, provide customer support, and deliver the features and functionality of the Service
Communication: To send you transactional emails (account confirmations, password resets, billing notifications) and service announcements
Improvement and Optimization: To analyze usage patterns, troubleshoot technical issues, and improve the features, performance, and user experience of the Service
Legal Compliance: To comply with applicable laws and regulations, including the CCPA/CPRA and GDPR
Fraud Prevention: To detect, prevent, and address fraud, security vulnerabilities, and other harmful or illegal activities

How We Share Your Information

We share your information with third parties only as necessary to provide the Service, comply with legal obligations, or with your consent. We do not sell your personal information, nor do we share your information for purposes of financial incentive or exchange of value that would constitute a "sale" or "share" under the CCPA or CPRA.

Third-Party Service Providers

Stripe: Payment and billing information (billing name, address, and transaction details) for payment processing and subscription management. Stripe does not receive full card numbers from us — we never store or transmit these. See Stripe's Privacy Policy at stripe.com/privacy.
Supabase: Names, email addresses, usage data, authentication information, and session identifiers, for database hosting, user authentication, session management, and security. See Supabase's privacy terms at supabase.com/privacy.
Anthropic: The business information, text, and other content you submit in order to generate your privacy policy document. Anthropic processes this content to generate the output documents you request. See Anthropic's Privacy Policy at anthropic.com/privacy.

Other Sharing

We may disclose your information if required by law, court order, or government request. We may also share information to enforce our Terms of Service, protect our rights and the safety of our users, or in connection with a merger, acquisition, bankruptcy, or sale of assets (in which case your information would be subject to the acquirer's privacy policy).

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

Authenticate your session and keep you logged in
Remember your preferences and settings
Analyze Service usage and performance

You can manage cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use the Service.

Data Retention

We retain your information only for as long as your account and customer relationship remain active. Once you delete your account or your subscription ends, we will delete your personal information or anonymize it so that it can no longer be associated with you, except to the extent we are required to retain it by law or for legitimate legal or business purposes (such as resolving disputes or complying with tax obligations).

User-generated content (such as documents you create) will be deleted or anonymized according to this same timeline, unless you export or download your content before deletion.

Data Security

We use industry-standard security measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no security system is entirely risk-free. We cannot guarantee absolute security, and you use the Service at your own risk. If you believe your account has been compromised, please contact us immediately at privacy@getprivatly.com.

Your Rights

Your rights depend on your location and the applicable privacy laws.

California Residents (CCPA / CPRA)

Right to Know: Request what personal information we have collected about you, the categories of information, the sources, and the purposes for collection.
Right to Delete: Request deletion of your personal information, subject to certain exceptions.
Right to Correct: Request that we correct inaccurate personal information.
Right to Opt-Out: Opt out of the "sale" or "sharing" of your personal information for targeted advertising. We do not currently engage in these practices, but you can submit an opt-out request if you wish.

To submit a consumer request for access, deletion, or correction, please contact us at privacy@getprivatly.com. We will verify your identity and respond within 45 days. You may also designate an authorized agent to submit requests on your behalf. We will not discriminate against you for exercising these rights.

European Residents (GDPR)

If you are located in the European Union, European Economic Area, or Switzerland, you have the following rights under the GDPR:

Right of Access: Request a copy of the personal information we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete personal information.
Right to Erasure: Request deletion of your personal information, subject to legal exceptions.
Right to Restrict Processing: Request that we limit how we use your information.
Right to Data Portability: Request your personal information in a structured, machine-readable format.
Right to Object: Object to our processing of your information on the basis of legitimate interest.
Right to Lodge a Complaint: Lodge a complaint with your applicable data protection authority.

Our lawful bases for processing your personal information include:

Consent: When you provide your explicit consent to processing
Contract: When processing is necessary to provide the Service and fulfill our contract with you
Legal Obligation: When we are required by law to process your information
Legitimate Interest: When we have a legitimate business interest in processing (such as fraud prevention, security, or service improvement), balanced against your rights

To exercise any of these rights, please contact us at privacy@getprivatly.com. We will respond within 30 days, or as required by law.

Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13 without verifiable parental consent, we will take steps to delete such information promptly. If you believe we have collected information from a child under 13, please contact us immediately at privacy@getprivatly.com.

International Data Transfers

We operate from the United States and may transfer, store, and process your information in the United States or other countries. When we transfer your information internationally, we take appropriate measures designed to protect your information and comply with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Effective Date" at the top of this policy. Your continued use of the Service after such notification constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our privacy practices, please contact us at:

privacy@getprivatly.com