Privacy Policy
Last updated: March 2026
1. Information We Collect
We collect information you provide when creating an account, including your name, email address, and organization details. We also collect usage data such as pages visited, features used, and interaction patterns to improve the Service. When you subscribe, billing information (payment method, billing address) is collected and processed securely by Stripe — we do not store full payment card details on our servers.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Offerframe platform
- Process transactions and manage your subscription
- Send transactional emails (quote notifications, signature requests, account alerts)
- Respond to support requests and troubleshoot issues
- Analyze usage patterns to improve features and performance
- Detect and prevent fraud, abuse, or security incidents
3. Administrative Access
Platform administrators may view your account in read-only mode to help resolve issues or ensure platform quality. Every access is logged with timestamp, admin identity, and tenant accessed. No data is modified during these sessions. You can request a copy of your access log at any time.
5. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. If you close your account or request deletion, we will remove your personal data within 30 days, except where retention is required by law (e.g., billing records). Tenant data — including quotes, catalogs, and templates — is deleted upon tenant account closure unless an export is requested beforehand.
6. Security
We take the security of your data seriously. Measures include TLS 1.2+ encryption for data in transit, AES-256 encryption for data at rest, row-level security (RLS) on every database table for complete tenant isolation, comprehensive audit logging for all sensitive actions, SHA-256 document hashing for e-signature integrity, and encrypted storage of third-party integration tokens. For full details, visit our Security page.
7. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your personal data and account
- Export — request a machine-readable export of your data
- Restriction — request that we limit how we process your data
- Objection — object to processing of your data for specific purposes
To exercise any of these rights, contact us at privacy@offerframe.io. We will respond within 30 days.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the email address associated with your account and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
9. Contact
If you have questions about this Privacy Policy or how we handle your data, please contact us.