Privacy Policy

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send related information including purchase confirmations and invoices
• Send administrative communications such as account confirmations, security alerts, and support messages
• Send renewal alerts, expiration notifications, and workflow updates related to your devices
• Respond to comments, questions, and requests and provide customer support
• Monitor and analyze usage patterns to improve the Service
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Comply with legal obligations

We do not sell your personal information or your clients' data to third parties. We do not use your business data (client names, device information, etc.) for any purpose other than providing the Service to you.

Your data is stored securely using Supabase, a managed database platform with enterprise-grade security controls. We implement the following protections:

• Row-level security (RLS) ensuring each organization can only access its own data
• Encryption in transit via TLS/HTTPS for all data transmitted to and from the Service
• Encryption at rest for stored data
• Access controls limiting employee access to production data
• Regular security reviews and vulnerability assessments

While we implement commercially reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

MSP Renewals is a multi-tenant platform. Your organization's data — including client names, device information, and renewal records — is logically separated from other organizations' data using database-level row security policies. No other MSP subscriber can view, access, or modify your data.

We may share your information only in the following circumstances:

• Service providers: We share data with trusted third-party vendors who assist in operating the Service, including Supabase (database), Stripe (payments), Resend (email delivery), and Railway (hosting). These providers are contractually obligated to protect your data.
• Distributor quote requests: When you initiate a quote request, relevant device information is included in the request sent to the selected distributor (TD SYNNEX, D&H, or Ingram Micro) on your behalf.
• Legal requirements: We may disclose information if required by law, subpoena, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of MSP Renewals, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service prior to your information becoming subject to a different privacy policy.

We use the following types of cookies:

• Essential cookies: Required for authentication and platform operation. These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand how users interact with the Service to improve performance and usability.

You can control cookie settings through your browser. Disabling essential cookies will prevent you from logging into the Service.

We retain your personal information and business data for as long as your account is active or as needed to provide the Service. If you cancel your subscription:

• Your account and data remain accessible for 30 days following cancellation
• After 30 days, your data is marked for deletion and permanently removed within 90 days
• Billing records may be retained for up to 7 years to comply with financial regulations

You may request immediate deletion of your data by contacting us at privacy@msprenewals.com.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request an export of your data in a machine-readable format
• Objection: Object to processing of your personal data in certain circumstances
• Withdraw consent: Where processing is based on consent, withdraw that consent at any time

To exercise any of these rights, contact us at privacy@msprenewals.com. We will respond to your request within 30 days.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information held by businesses
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your CCPA rights

To submit a CCPA request, contact us at privacy@msprenewals.com.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete that information.

The Service may contain links to third-party websites, including distributor portals and vendor sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date, and where appropriate, by sending you an email notification. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, contact us at: