policystamp.com

Privacy Policy

Effective April 26, 2026.

This Privacy Policy explains how policystamp.com (operated by Vicolo Studio, "we," "us," "our") collects, uses, and protects your personal information.

Information we collect

  • Form inputs: the business name, website URL, contact email, jurisdiction, integrations, and other fields you fill in to generate a document.
  • Account information (Pro tier): your email address and any social-login identifier you use (Google).
  • Payment information: processed by Lemon Squeezy. We do not see or store full card numbers.
  • Technical data: IP address and basic browser information for security and analytics. We use privacy-friendly analytics (no cross-site tracking).

How we use your information

  • To generate the legal documents you request.
  • To send transactional emails (purchase receipts, password-less login links).
  • To provide customer support.
  • To improve the Service through aggregated, non-identifying analytics.
  • For Pro subscribers: to deliver the auto-update digest and host your saved documents.

Sharing and disclosure

We share data only with the following processors:

  • Lemon Squeezy — payment processing and merchant of record. Privacy policy.
  • DeepSeek — generates the document text from your inputs. Inputs are sent to DeepSeek's API for the duration of the generation request only. Privacy policy.
  • Resend — sends transactional emails. Privacy policy.
  • Cloudflare — DNS, CDN, and DDoS protection. Privacy policy.
  • Supabase (Pro tier only) — authentication and storage of your saved documents. Privacy policy.

Data retention

  • Free generations: form inputs are kept in memory only for the duration of the generation request and then discarded. Generated documents are cached server-side for up to 30 minutes so paid users can retrieve the unwatermarked version after purchase.
  • Paid one-time purchases: the document and your inputs are retained for 90 days so you can re-download the document.
  • Pro accounts: documents and inputs are retained as long as your account is active, plus 30 days after cancellation, then deleted.
  • Payment records: retained as required by tax and accounting law (typically 7 years).

Security

We use TLS encryption in transit, access controls on production systems, and least-privilege credentials for all third-party processors. We do not store payment card data ourselves.

Your rights

You have the right to:

  • Request access to the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your personal information.
  • Object to or restrict processing.
  • Receive a portable copy of your data.
  • Withdraw consent for any processing based on consent.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email [email protected]. We respond within 30 days.

EU / UK rights (GDPR)

If you are in the EU or UK, our lawful bases for processing are: contract (to deliver the Service you requested), legitimate interests (security and analytics), and consent (where applicable). You have the right to lodge a complaint with your national data protection authority (in the UK, the ICO).

California rights (CCPA / CPRA)

If you are a California resident, you have the right to know, delete, correct, opt-out of sale/sharing, limit use of sensitive personal information, and to non-discrimination. We do not sell or share personal information for cross-context behavioral advertising.

International transfers

Our infrastructure providers operate globally. When personal data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

Cookies

We use a small number of essential cookies for session management and a privacy-friendly analytics cookie. We do not use marketing or advertising cookies. You can control cookies through your browser settings.

Children

The Service is not directed at children under 13 (US) or under 16 (EU). We do not knowingly collect personal information from minors.

Changes

We may update this policy from time to time. Material changes will be posted here with a new effective date.

Contact

[email protected] — Vicolo Studio, Lahore, Pakistan.