Privacy Policy

This policy explains how Deadline Engine Ltd (“we”, “us”) handles personal data when you use Deadline Engine. We comply with the UK GDPR and the Data Protection Act 2018.

Who we are

Deadline Engine Ltd, a company registered in England and Wales. Controller for the purposes of UK GDPR. Contact: hello@deadlineengine.com.

What data we collect

• Account data: email address, name (if provided), password hash.
• Usage data: calculation inputs, saved deadlines, saved cases, reminder settings.
• Payment metadata: Stripe customer and subscription IDs. We do not receive or store payment card details. Card data is held by Stripe under their own privacy policy.
• Technical data: IP address, browser type, approximate location inferred from IP. Collected by Vercel and Supabase for security and uptime monitoring.

Lawful basis

• Performance of contract for account and billing data (UK GDPR Article 6(1)(b)).
• Legitimate interests for security logs and fraud prevention (Article 6(1)(f)).
• Consent where you opt in to non-essential communications. You can withdraw consent at any time.

How we use your data

• To provide the Service: authenticate you, store your saved calculations and cases, send reminder emails you have opted in to.
• To process payments: via Stripe.
• To communicate: account-related transactional emails, service updates.
• To secure the Service: detect abuse, prevent fraud.

Data location and sub-processors

Your data is stored within the UK and European Economic Area. We use these sub-processors:

• Supabase (database and authentication), eu-west-2 (London).
• Vercel (hosting and CDN), global network.
• Stripe (payments), as required to process subscriptions.
• Resend (transactional email), when reminder emails are enabled.

Where a sub-processor transfers data outside the UK, transfers are covered by UK Adequacy Regulations or Standard Contractual Clauses with UK Addendum.

Retention

• Account data: retained while your account is active, plus 30 days after closure.
• Saved calculations: retained with your account, deleted on account deletion.
• Payment records: retained for 7 years for UK tax law compliance.
• Security logs: 30 days.

Your rights

Under UK GDPR you have the right to:

• access your data;
• rectify inaccurate data;
• erase your data (subject to legal retention obligations);
• restrict or object to processing;
• data portability;
• withdraw consent where we rely on it;
• lodge a complaint with the Information Commissioner’s Office (ico.org.uk).

To exercise any of these rights, email hello@deadlineengine.com. We respond within one month.

Cookies

We use essential cookies only: a session cookie for authentication (managed by Supabase). No analytics or advertising cookies are set. See Cookie Policy.

Changes to this policy

Material changes will be notified by email or in-app notice. Non-material changes are reflected here with an updated date at the top.