Privacy Policy

Who we are

Lapsewise ("we", "us") provides renewal and expiry management software. For the personal data described in this policy, we act as the data controller for your account data and as a data processor for the records and documents you store in the service. If you have any questions, contact us at hello@lapsewise.com.

Data we collect

• Account data: your name, email address, password (stored only as a secure hash), and timezone preference.
• Workspace content: the records, dates, notes, and documents you add (for example certificates, contracts, and grants), plus any contact or entity names you choose to store.
• Usage and technical data: basic logs needed to operate and secure the service, such as request timestamps and error logs.
• Communications: messages you send us, for example through the contact form or by email.
• Analytics data (consent-based): if you accept analytics cookies, Google Analytics collects anonymised usage data such as pages viewed and approximate location (with IP anonymisation enabled).

We do not use advertising cookies and we do not sell your data. Analytics is optional and only runs after you choose "Accept all" on our cookie banner.

Why we use it (legal bases)

• To provide the service (performance of a contract): creating your account, storing your records, and sending the reminders you configure.
• To secure and improve the service (legitimate interests): fraud prevention, debugging, and reliability.
• To communicate with you (legitimate interests or consent): service emails and replies to your enquiries.
• To meet legal obligations where applicable, such as accounting and tax records for paid plans.

Reminder and account emails

Reminder emails are sent through Resend. Account emails (sign-up confirmation, password reset, and invitations) are sent through our email provider. These providers process the recipient address and message content solely to deliver the email on our behalf.

Where your data is stored

Your data is hosted on Supabase infrastructure in the European Union (Ireland, eu-west-1). Uploaded documents are stored in private storage with workspace-level access controls. Some sub-processors (for example our email and hosting providers) may process limited data; we choose providers that support GDPR-compliant transfers.

How long we keep it

We keep your account and workspace data for as long as your account is active. If you delete a record or document, it is removed from the live service. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records to meet legal obligations.

Your rights under the GDPR

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with your local data protection authority (in Sweden, the Integritetsskyddsmyndigheten, IMY).

To exercise any of these rights, email us at hello@lapsewise.com.

Security

We protect your data with encryption in transit, access controls, and per-workspace isolation. For more detail on how your documents are kept safe, see our Security page.

Cookies and analytics

Essential cookies are always active: one to keep you signed in, and a stored preference for your light or dark theme. These are required for the service to work and do not need consent.

Analytics cookiesare optional and off by default. We use Google Analytics (GA4) to understand how the site is used so we can improve it. It runs with Google Consent Mode v2: no analytics cookies are set and no data is collected until you select "Accept all" on our cookie banner. If you choose "Essential only", analytics stays disabled. We enable IP anonymisation, and we do not use Google Analytics for advertising. You can change your choice at any time by clearing the site's cookies. For more on how Google processes this data, see Google's privacy policy.

Changes to this policy

We may update this policy from time to time. We will revise the "last updated" date above and, for material changes, notify you through the service or by email.