Privacy Policy
Last Updated: September 30, 2026

1. Introduction

DD Delivery ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

  • Name and email address (for account creation)
  • Authentication credentials (encrypted passwords or OAuth tokens)
  • IP address and browser information (for security monitoring)
  • Usage data and analytics (for service improvement)

2.2 Business Information

As a business management platform, we also process:

  • Project files and task information
  • Team communications and documents
  • Billing and time tracking data

3. How We Use Your Information

We use your information to:

  • Provide and maintain our services
  • Authenticate and authorize access
  • Send administrative notifications
  • Monitor security and prevent fraud
  • Comply with legal obligations

4. Data Security

We implement industry-standard security measures including:

  • Encryption in transit (TLS 1.3) and at rest (AES-256)
  • Row-level security policies for multi-tenant isolation
  • Regular security audits and penetration testing
  • Audit logging for all sensitive operations

5. Your Rights (GDPR/CCPA)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a machine-readable format
  • Opt-out: Decline sale of personal information (CCPA)

6. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations. Audit logs are retained for 7 years for compliance purposes.

7. Third-Party Services

We use the following third-party services:

  • Supabase: Database and authentication (see Supabase Privacy Policy)
  • Vercel: Hosting infrastructure (see Vercel Privacy Policy)
  • Google OAuth: Single sign-on (see Google Privacy Policy)

8. Contact Information

For privacy-related questions or to exercise your rights, contact:

  • Email: privacy@enterprise-saas.com
  • Data Protection Officer: dpo@enterprise-saas.com
  • Support: support@enterprise-saas.com

Note: This is a placeholder document for development purposes. Final Privacy Policy will be provided by legal counsel before production launch and will include complete sections on: international data transfers, cookies policy, children's privacy, California resident rights (CCPA), European resident rights (GDPR), and dispute resolution procedures.