Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, business name, business address, phone number, and password (stored as a secure hash).

Client Information: You may store your clients' names, email addresses, company names, addresses, and phone numbers to create proposals and invoices.

Usage Data: We collect standard server logs including IP addresses, browser type, and pages visited to maintain service quality.

Payment Data: Payment processing is handled entirely by Stripe. We do not store credit card numbers or bank account details. We retain Stripe customer IDs and subscription status.

E-Signature Data: When a document is signed, we record the signer's name, email, IP address, browser user-agent, timestamp, and a cryptographic hash of the signed document for legal compliance.

2. How We Use Your Information

• To provide and maintain the HazelTab service
• To send proposals, invoices, and payment confirmations on your behalf
• To process subscription payments via Stripe
• To send account-related emails (password resets, security alerts)
• To maintain e-signature audit trails as required by law

We do not sell your data. We do not use your data for advertising.

3. Data Sharing

We share data only with the following service providers, strictly for operating the service:

• Stripe — payment processing
• Resend — transactional email delivery
• Sentry — error monitoring and application stability (may receive IP addresses, browser information, and error context when issues occur)

We do not share data with any other third parties unless required by law.

4. Data Retention

We retain your account data for as long as your account is active. Proposal, invoice, and e-signature records are retained for 7 years after creation for legal compliance. You may request deletion of your account and associated data at any time by contacting us.

5. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Export your data in a portable format

To exercise these rights, contact us at support@hazeltab.com.

6. Cookies

We use essential cookies only:

• session — authentication token (httpOnly, 7-day expiry)
• portal-session — client portal authentication (httpOnly, 24-hour expiry)

We do not use tracking cookies, analytics cookies, or advertising cookies.

7. Security

We protect your data with industry-standard measures including encrypted connections (TLS), hashed passwords (bcrypt), and cryptographically signed authentication tokens. E-signature records include SHA-256 document hashes for tamper detection.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email. Continued use of the service after changes constitutes acceptance.

9. Contact

For privacy-related questions, contact us at support@hazeltab.com.