Privacy Policy

Last updated: April 24, 2026

Introduction

Our commitment to protecting your personal information.

policy

DoneRoad ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By accessing or using our service, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please do not use our service.

Information We Collect

Types of data we collect and why we collect them.

database
person

Account Information

Name, email address, password (hashed), and optional OAuth identifiers (Google, Facebook) provided during registration or sign-in.

Required
tune

Usage & Configuration Data

Alert rules, conditions, asset watchlists, notification channel settings, and preferences you configure within the app.

Required
history

Alert History & Logs

Records of triggered alerts, delivery status, and notification channel activity, retained to display your history and improve reliability.

Operational
language

Technical & Device Data

IP address, browser type, operating system, and access timestamps collected automatically for security monitoring and abuse prevention.

Automatic

How We Use Your Information

The purposes for which we process your personal data.

manage_accounts
check_circle
Service Delivery — operate your account, process alert rules, and deliver notifications via your chosen channels.
check_circle
Security & Fraud Prevention — detect and prevent unauthorized access, abuse, and other harmful activity on our platform.
check_circle
Service Improvement — analyze aggregate usage patterns to improve performance, reliability, and new features — never sold to third parties.
check_circle
Legal Compliance — meet applicable legal obligations, respond to lawful requests, and enforce our Terms of Service.
check_circle
Transactional Communications — send essential service emails such as account confirmations, password resets, and security notifications.

Data Sharing & Third Parties

We do not sell your data. Limited sharing only where necessary.

share
cloud

Infrastructure Providers

Cloud hosting (AWS / GCP) operating under strict data processing agreements

DPA Signed
send

Notification Services

Telegram, email providers — only your alert content and destination are shared, no profile data

Minimal
gavel

Legal Authorities

Disclosure only when required by law, court order, or to protect rights and safety

If Required
sell

Data Sales / Advertising Networks

We never sell, rent, or trade your personal information to any third party

Never

Data Retention

How long we keep your data and when it is deleted.

schedule
Account data Until deletion Retained as long as your account is active; deleted within 30 days of account closure
Alert history 90 days Alert trigger logs are retained for 90 days, then automatically purged
Security logs 12 months Login and access logs kept for 12 months for security and compliance purposes
Backups 30 days Encrypted backups are rotated on a 30-day cycle

Your Rights

You have full control over your personal data.

shield_person
visibility

Right to Access

Request a copy of all personal data we hold about you

Supported
edit

Right to Rectification

Correct inaccurate or incomplete personal information at any time via your account settings

Supported
delete_forever

Right to Erasure

Request deletion of your account and all associated personal data ("right to be forgotten")

Supported
download

Right to Data Portability

Export your alert rules and configuration in a machine-readable format (JSON)

Supported
block

Right to Object / Restrict Processing

Object to or restrict how we process your data in certain circumstances

Supported

Cookies & Tracking

We use only essential cookies — no advertising or tracking.

cookie
Session cookies Essential Maintain your authenticated session; expire on logout or browser close
CSRF token Essential Protect against cross-site request forgery attacks on all form submissions
Analytics / Ad cookies Not Used We do not use third-party analytics, advertising, or behavioral tracking cookies

Contact & Questions

Reach out if you have any privacy-related requests or concerns.

contact_support

To exercise any of your rights, or if you have questions about this policy, please contact our privacy team. We will respond to all requests within 30 days.

mail

Privacy Inquiries

[email protected]

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated effective date. Continued use of the service after changes constitutes acceptance of the updated policy.