Privacy Policy

Last updated: August 2026

This document is maintained in English, which is its authoritative version.

1. Who We Are

ClosingMoment ("we", "us") operates the proposal tracking platform at closingmoment.com. Contact: hello@closingmoment.com.

2. What Data We Collect

We collect the following categories of personal data:

Account data — name, email address, and password hash collected when you register via Clerk (our authentication provider).
Proposal content — proposal text, client names, client email addresses, and WhatsApp numbers that you enter while using the service.
Tracking events — IP address, browser user-agent, device type, country/city (from Vercel edge headers), and section-level reading behaviour for proposals you share. This data is collected from your clients when they open your proposal link.
Payment data — billing email, country and last-4 card digits stored by Stripe, who is the seller of record for your purchase; we never see or store full card numbers.
Usage analytics — anonymised product usage events sent to PostHog (e.g. proposals created, features used). No client PII is sent to PostHog.

3. How We Use Your Data

To provide the service: creating and tracking proposals, sending notifications.
To process payments and remit sales tax via Stripe, our Merchant of Record.
To send transactional emails (proposal alerts, weekly digest) via Resend.
To improve the product using aggregated, anonymised analytics.

4. Third-Party Processors

We share data only with the following processors:

Supabase — database and file storage (hosted in London, UK)
Clerk — authentication and user management
Resend — transactional email delivery
Stripe — Merchant of Record. Stripe is the seller of record for all purchases and acts as a separate data controller for payment and tax data, not solely as our processor.
PostHog — product analytics (anonymised events only)
Vercel — application hosting and edge network

5. Data Retention

We retain your account data for as long as your account is active. Proposal and tracking data is retained indefinitely to power your win/loss intelligence features. You may request deletion at any time (see Section 7). When you delete your account all data is permanently removed within 30 days.

6. Cookies

We use strictly necessary cookies for authentication (set by Clerk) and a locale preference cookie. We do not use advertising cookies. PostHog uses a first-party analytics cookie that you can opt out of by contacting us.

7. Your Rights

Under GDPR (EU/UK) and similar laws you have the right to:

Access — request a copy of the data we hold about you.
Rectification — correct inaccurate data via your account settings.
Erasure — delete your account and all associated data from Settings → Advanced → Delete Account, or by emailing us.
Portability — receive your data in a structured, machine-readable format on request.
Object — object to processing based on legitimate interests.

To exercise any right, email hello@closingmoment.com. We will respond within 30 days.

8. Security

All data is encrypted in transit (TLS) and at rest. Access to the production database is restricted to service-role credentials and is not exposed to client-side code.

9. Children

ClosingMoment is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, contact us immediately and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. We will notify you via email of any material changes at least 14 days before they take effect.

11. Contact

ClosingMoment is the data controller for the personal data described in this policy. For any privacy or data-protection request — access, correction, export or erasure — contact our privacy team and we will respond within 30 days: hello@closingmoment.com