DueCast

Privacy Policy

Last updated: 20 August 2026

This Privacy Policy explains how [LEGAL ENTITY NAME — CONFIRM BEFORE LAUNCH] ("we", "us", or "our") collects, uses, and stores your personal data when you use DueCast ("the Service"). It also describes your rights under UK data protection law.

1. What we collect

We collect the following types of information when you use DueCast:

  • Account information: your email address and authentication details when you create an account.
  • Uploaded documents: contract files, PDFs, spreadsheets, images, and other documents you upload for processing.
  • Extracted contract data: renewal dates, vendor names, costs, auto-renewal status, notice periods, term lengths, and other fields extracted from your uploaded documents.
  • Usage data: information about how you interact with the Service, such as actions taken in the app, error reports, and device/browser information.
  • Payment information: billing details processed by our payment provider. We do not store full card numbers on our own servers.

2. Why we collect it

We use the data we collect to:

  • Extract and store renewal and contract details from the documents you upload;
  • Provide the DueCast dashboard, reminders, timeline, and reporting features;
  • Send you email and push notifications about upcoming renewals and cancellation windows;
  • Operate and secure your account;
  • Process payments and manage your subscription;
  • Improve the Service and fix issues.

3. Third-party processors

We use carefully selected third-party services to run DueCast. These processors only handle data on our behalf and in line with this Privacy Policy:

  • Supabase — hosts our database, authentication, and file storage infrastructure.
  • Stripe — processes subscription payments.
  • RevenueCat — manages subscription and entitlement state, and receives billing-related data such as your email, plan, and payment status.
  • Resend — sends transactional emails such as renewal reminders and account notifications.
  • Anthropic / Claude API — powers AI-assisted extraction of contract details from uploaded documents.
  • OneSignal — delivers push notifications about upcoming renewals to signed-in users who opt in.
  • Analytics — a first-party-proxied analytics script records anonymous usage statistics such as page views.

4. Data retention

Your uploaded documents and extracted contract data are retained for as long as your account is active, so you can continue to manage your renewals. If you delete a document, record, or attachment, we remove it from active storage promptly. If you close your account, we delete or anonymise your personal data within a reasonable period, unless we are required to keep it by law.

5. Your rights under UK GDPR

Under UK data protection law, you have the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Correction: ask us to correct inaccurate or incomplete data.
  • Deletion: request deletion of your personal data and account in certain circumstances.
  • Data portability: receive your data in a structured, commonly used format.
  • Objection and restriction: object to or restrict certain processing of your data.
  • Complain: lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been mishandled.

To exercise any of these rights, contact us at the email address below. We will respond within one month in most cases.

6. Data security

We use encryption in transit, access controls, and industry-standard hosting practices to protect your data. Only you can access your own uploaded documents and records through your authenticated account, unless you explicitly choose to share access.

7. Cookies and analytics

DueCast uses essential cookies to keep you signed in and maintain your session. We may also use analytics cookies to understand how the Service is used. You can control non-essential cookies through your browser settings.

8. International transfers

Some of our processors operate outside the UK. Where this happens, we rely on appropriate safeguards, such as standard contractual clauses or equivalent measures, to ensure your data is protected.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service. Your continued use of DueCast after changes take effect means you accept the updated policy.

10. Governing law

This Privacy Policy is governed by the laws of England and Wales, and any disputes will be resolved in the courts of England and Wales.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@duecast.online.