Privacy Policy

Last updated [DATE]

This page is written in plain language so you can see exactly what happens to your records. Bracketed items are details still being filled in.

Assay is a prospecting and pipeline tool run by [LEGAL BUSINESS NAME] ("Assay," "we"). This policy covers assayonline.com and the Assay app at app.assayonline.com.

Your records are yours

The companies, contacts, projects, notes and activity you put into Assay belong to you. We don't sell them, rent them, or share them with other customers. We don't use them to advertise to you or anyone else.

Where your data lives

Your workspace is stored in a database run by Supabase, a hosted database service, in [REGION, e.g. a US data center]. Each customer's records are walled off from every other customer's at the database level, so one organization can't read another's. Inside your organization, what each person can see depends on the role you give them: owner, admin, member, or viewer.

The app itself is served by Cloudflare. Sign-in is handled by Supabase, which stores your email address and a scrambled (hashed) version of your password. We never see your password.

Payments

Stripe handles every card payment. When you subscribe or update your card, you type the card details into Stripe's own page. Assay never sees or stores your card number. We keep only what Stripe tells us about your subscription: your plan, the number of users, and whether the subscription is active.

Nothing sends on its own

Assay drafts emails and sequence steps for you. It never sends them. You copy or open each draft in your own email program and press Send yourself. Assay doesn't send email to your contacts on your behalf.

Exporting and leaving

You can export everything in your workspace at any time from inside the app, whether or not your subscription is active. If your trial ends or you cancel, your records go read-only and stay exportable. [HOW LONG RECORDS ARE KEPT AFTER CANCELLING, AND HOW TO ASK FOR DELETION]

Items you move to Trash can be restored for 30 days. After that they are removed for good.

What we collect

• Account details: your name, email address, and organization name.
• Your workspace: whatever you enter or import.
• Demo requests: if you fill in the Request a demo form, the details you give are emailed to us so we can reply.
• Basic technical logs: our hosting providers keep standard server logs, such as IP address and browser type, to keep the service running and secure. [ANALYTICS TOOLS, IF ANY]

Services we rely on

• Supabase: database and sign-in
• Cloudflare: hosting and demo-request email
• Stripe: payments
• [EMAIL SENDING SERVICE FOR SIGN-IN AND INVITE EMAILS, e.g. Resend]
• [AI PROVIDER, IF AI DRAFTING IS TURNED ON, AND WHAT IS SENT TO IT]

Cookies

Assay uses your browser's storage to keep you signed in and to remember small settings, like which workspace you last opened. We don't use advertising cookies. [CONFIRM ONCE ANALYTICS ARE DECIDED]

Your choices and rights

You can see, correct, export, or delete your records from inside the app. To ask about your data or close your account, email [CONTACT EMAIL]. [STATE-SPECIFIC RIGHTS LANGUAGE, IF YOUR ATTORNEY ADVISES IT]

Changes to this policy

If we change this policy in a way that matters, we'll update the date at the top and tell account owners by email before the change takes effect.

Contact

[LEGAL BUSINESS NAME]
[MAILING ADDRESS]
[CONTACT EMAIL]