Privacy
Last updated August 2026.
We collect the minimum that makes the product work: your email, the documents you choose to track, and basic security logs. We do not sell your data and we do not run third-party advertising trackers.
What we collect
- Your account — email address and a hashed password. We never store the password itself.
- Your portfolio — which documents you track, watch, and any notes or renewal dates you add.
- Documents you submit — the URL, and for uploads the file itself, so we can read it.
- Security logs — hashed IP address and hashed user-agent on sessions and sign-in attempts, to stop credential stuffing.
What we do not do
- We do not sell or rent personal information.
- We do not run advertising or cross-site tracking pixels.
- We do not read your email, your accounts, or anything you have not handed us.
How long we keep it
Uploaded files are deleted after 30 days. Analyses of public documents are kept indefinitely, because they are about the company's document rather than about you. Your account data is kept until you delete it.
Your rights
Wherever you live, you can export everything we hold about you and you can delete it. Under GDPR that covers access, rectification, erasure, portability and objection; under the CCPA it covers knowing, deleting, correcting, and opting out of sale — which is simple for us, because we do not sell.
Cookies
One cookie, for your signed-in session. It is HttpOnly, Secure, and signed. No analytics cookies, no advertising cookies, so there is no consent banner to click through.
Contact
Privacy questions: privacy@tosgenie.com.