Privacy Policy

1. Scope

This policy explains what data Prezdo collects, why, and how it's handled — both for workspace owners who use Prezdo to share documents, and for viewers who open a gated document link.

2. What we collect

From workspace owners and members

• Account details: name, email, workspace name and settings
• Documents you upload and the access rules you configure for them
• Billing details processed by our payment provider (see §5) — we do not store full card numbers
• Product usage data (pages visited, actions taken in the dashboard) to improve the product

From document viewers

• The email address or password used to satisfy the access rule a workspace owner sets on a document
• A one-time passcode (OTP) sent to verify email-gated access, valid for a short window and not reusable
• Page-level view events — which pages were viewed, for how long, and approximate location/device — used to build the analytics a workspace owner sees for their own document
• A short-lived session cookie so you don't have to re-verify on every page

We do not require a viewer to create a Prezdo account to view a shared document.

3. How we use it

• To operate the service — authenticate access, enforce the access rules a workspace owner sets, and render documents
• To generate the page-level analytics a workspace owner sees for documents they own
• To bill paid plans and provide customer support
• To secure the platform — detect abuse, rate-limit, and prevent unauthorized access
• To send transactional email (OTPs, receipts, billing notices) — never marketing email without opt-in

We do not sell personal data, and we do not use document content or viewer data to train AI models.

4. Retention

Documents and analytics are retained for as long as the workspace exists, or until the owner deletes them. Raw billing webhook payloads — which can contain customer PII from our payment processor — are retained for 90 days after processing and then automatically deleted by a daily cleanup job; unprocessed events are kept until resolved. If you delete your workspace, we delete associated documents and viewer data within a reasonable period, except where we're required to retain records (e.g. billing history) for legal or tax purposes.

5. Who we share data with

We use a small number of subprocessors to run Prezdo, each bound by their own data protection terms:

• Vercel — application hosting and infrastructure
• Neon — database storage (Postgres)
• Paddle — our merchant of record for billing; Paddle collects and processes payment details directly and acts as the seller of record. See Paddle's own privacy policy for how it handles payment data.
• Resend — transactional email delivery (OTPs, receipts, notifications)

We do not share your data with anyone else for their own marketing purposes. We may disclose data if required by law, or to protect the rights, safety, or property of Prezdo or our users.

6. Cookies

We use a small number of first-party cookies required for the service to function: a session cookie for logged-in dashboard access, and a separate short-lived session cookie for viewers who have passed a document's access check. We don't use third-party advertising or tracking cookies.

7. Security

Data is encrypted in transit (TLS) and at rest. Passwords and access-rule secrets are hashed, not stored in plaintext. Access to production data is limited to what's needed to operate the service. No system is perfectly secure, and we can't guarantee absolute security, but we design for it as a first-class requirement.

8. Your rights

Depending on where you're located, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Workspace owners can manage and delete most of their own data directly from the dashboard. For anything else, or if you're a document viewer without dashboard access, email hello@prezdo.com and we'll respond within a reasonable time.

9. Children

Prezdo is not directed at children under 16, and we don't knowingly collect their data.

10. Changes to this policy

We may update this policy as the product evolves. We'll update the effective date above, and for material changes we'll make reasonable efforts to notify workspace owners.

11. Contact

Questions about this policy or your data: hello@prezdo.com.