Privacy Policy

ReleaseDock ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website and service at releasedock.co ("the Service").

By using the Service, you consent to the practices described in this policy. If you do not agree, please do not use the Service.

Account information: When you create an account, we collect your name, email address, and profile image through our authentication provider (Clerk). We do not store passwords directly.

Project data: Content you create through the Service, including changelogs, knowledge base articles, and support conversations. This data is stored on our infrastructure provider (Convex).

Usage data: We collect anonymized analytics about how you interact with the Service, including page views, feature usage, and session duration. We use Vercel Analytics for this purpose.

End-user data: When your end users interact with the ReleaseDock widget on your website, we may collect their email address (if provided), support messages, and basic device information (browser type, device type). This data is collected on your behalf — you are the data controller for your end users' information.

Payment information: Payment processing is handled by our third-party payment processor. We do not store credit card numbers or full payment details on our servers.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related communications
• Send service-related notifications (e.g., changelog publish confirmations, account alerts)
• Respond to support requests and inquiries
• Monitor and analyze usage patterns to improve the user experience
• Detect, prevent, and address technical issues or abuse
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

We share personal information only in the following circumstances:

• Service providers: We use third-party services to operate the platform, including Convex (database and backend), Clerk (authentication), Vercel (hosting and analytics), and Resend (email delivery). These providers process data on our behalf under contractual obligations to protect your information.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With your consent: We may share information with your explicit consent for purposes not covered by this policy.

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).

Project data (changelogs, articles, conversations) is retained for as long as the associated project exists. When a project is deleted, its data is permanently removed.

Anonymized usage analytics may be retained indefinitely as they cannot be linked back to individual users.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Access controls limiting who can view or modify data
• Regular security reviews of our infrastructure and code

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data portability: Request your data in a structured, machine-readable format
• Objection: Object to certain processing of your personal information

To exercise any of these rights, contact us at privacy@releasedock.co. We will respond within 30 days.

We use essential cookies required for the Service to function (e.g., authentication session cookies). We use Vercel Analytics for anonymized usage tracking, which does not use cookies or collect personally identifiable information.

We do not use third-party advertising cookies or tracking pixels.

Your information may be processed and stored in the United States, where our infrastructure providers are located. By using the Service, you consent to the transfer of your information to the United States.

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, we rely on standard contractual clauses and other lawful transfer mechanisms to ensure your data is protected.

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

When you use ReleaseDock to collect data from your end users (e.g., through the support widget or subscriber sign-ups), you are the data controller for that information. You are responsible for:

• Providing appropriate privacy notices to your end users
• Obtaining any necessary consents for data collection
• Complying with applicable data protection laws in your jurisdiction

We process end-user data on your behalf as a data processor, in accordance with your instructions and these terms.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

privacy@releasedock.co