Legal docs for your business. Pay once. Own forever.

Privacy Policy

My Company · Last updated May 2026

1. Introduction

My Company (“we,” “our,” or “us”) operates a software-as-a-service platform accessible at mycompany.com. This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and what rights you have. It applies to all users of our website and services, including users in the EEA, the United Kingdom, and California.

2. Information We Collect

Account and contact data: Your name, email address, company name, and password when you register.

Payment data: Billing name, billing address, and payment card details. Card numbers are processed by Stripe and never stored on our servers.

Usage data: Pages visited, features used, session duration, browser type, operating system, IP address, and referring URLs, collected automatically when you use our platform.

Communications: Content of support requests, feedback, and any messages you send us.

3. How We Use Your Information

• Create and manage your account and deliver our services
• Process payments and send receipts and invoices
• Send transactional emails (account confirmations, password resets, billing alerts)
• Respond to support requests and improve customer service
• Monitor platform performance, detect bugs, and prevent abuse
• Conduct analytics to understand how users interact with our product
• Comply with legal obligations

4. Legal Bases for Processing (EEA / UK)

• Contract performance — to provide the services you signed up for
• Legitimate interests — to improve our platform, prevent fraud, and communicate about your account
• Legal obligation — to comply with applicable laws and regulations
• Consent — for non-essential cookies and marketing communications

5. Data Sharing and Disclosure

We do not sell your personal data. We share data only with:

• Service providers: Stripe (payments), AWS (cloud hosting), Resend (transactional email), Datadog (monitoring)
• Analytics partners: Aggregated, anonymised data only
• Legal authorities: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger, acquisition, or asset sale

6. International Data Transfers

Our servers are located in the United States. If you are in the EEA or UK, your data will be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for such transfers.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide services. Upon deletion, we anonymise your data within 30 days, except where required for legal, tax, or fraud-prevention purposes (typically up to 7 years for financial records).

8. Cookies and Tracking Technologies

We use strictly necessary cookies to operate the platform and optional analytics cookies (Google Analytics) to understand usage patterns. You may manage preferences via the cookie banner on your first visit. See our Cookie Policy for full details.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”)
• Restrict or object to certain processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time without affecting prior lawful processing
• Lodge a complaint with your local supervisory authority

To exercise any of these rights, email privacy@mycompany.com. We will respond within 30 days.

10. Security

We implement industry-standard measures including TLS encryption in transit, AES-256 encryption at rest, strict access controls, and regular security audits. Contact us immediately if you suspect unauthorised access to your account.

11. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. For material changes we will notify you by email or prominent in-app notice at least 14 days before the changes take effect. Continued use after the effective date constitutes acceptance.

13. Contact

My Company, 123 Main Street, New York, NY 10001, USA. Email: privacy@mycompany.com.