Privacy summary

What we collect

• Account data for the people who use eEndorsements — name, email, role, and authentication credentials.
• Customer data your business uploads or generates through the product — contacts, reviews, surveys, campaign content, attachments.
• Operational data — IP addresses, user-agent strings, and audit events used for security and debugging.
• Billing data — held by Stripe. We see only your billing email, subscription status, and a Stripe customer identifier.

Why we collect it

To provide the service. We do not sell customer data and do not use it to train any kind of model.

Data subject rights

If you are a customer's end-user (a contact or a review author), please contact the business that collected your data — they are the data controller and we are their processor. If they can't help, email privacy@eendorsements.com and we will route the request appropriately. We respond to access, deletion, and portability requests within 30 days.

Retention

Live customer data is retained for the lifetime of the subscription. Audit logs are retained for at least 12 months. Deleted records are removed from primary storage immediately and purged from backup retention windows over the next 30 days.

Where data lives

Primary storage is in AWS us-east-2 (Ohio, USA) via Supabase. Application compute runs on Vercel's global edge with US regions as primary. See the Subprocessors page for the full list of providers and their regions.