Security, privacy and your data

This page describes what GreenlightSubs does today. Our privacy policy is the formal version.

Your connection

• Every page is served over HTTPS. Plain http:// addresses are redirected to HTTPS.
• Browsers are told to use HTTPS for greenlightsubs.com every time.

Logins

• Passwords are stored only as a salted scrypt hash, never as the password itself.
• Your login cookie can't be read by scripts on the page and is only sent over HTTPS. The server stores only a hash of it.
• A login lasts up to 30 days. Log out ends it.
• Repeated wrong passwords are slowed down, both per network and per account.
• Every form is protected against cross-site request forgery.
• Password reset links work for 1 hour, and only the newest one works. Resetting your password logs you out everywhere else.

Your documents

• Each account's vendors, documents and files are separate. Every request for a document checks that it belongs to the account of the person asking.
• Files are only served to people logged in to the account that owns them. There are no public file links.
• Only PDFs and images are accepted. The file type is checked from the file's contents, not its name.
• Files are stored under random names, not their original names.
• Rejected uploads are deleted. Deleting a document or a vendor deletes the files too.
• W-9s can contain taxpayer ID numbers. They're stored like any other document and only people logged in to your account can open them.

Vendor upload links

• Each link contains a long random code that can't be guessed.
• A link only shows that one vendor's document statuses for your company. It doesn't show other vendors or your internal notes.
• Vendors can send files through the link, but can't open or download any file from it.
• Generate new link on the vendor page replaces a link; the old one stops working at once. Archiving a vendor switches their link off.
• Upload pages ask search engines not to index them.

Emails

• Links that are private to one person (password resets, team invites and email confirmation) are never shown in your team's Sent emails list.
• New accounts can't email vendors until the owner confirms their email address. See Confirming your email.

Payments

Payments are processed by Paddle, our merchant of record. Card details go straight to Paddle and never reach our servers.

Visit counts

On public pages like this one, we count page views per page and referring site. No cookies are used for it and no IP addresses are stored.

Backups

• Every night the account database and uploaded files are also copied to separate Google Cloud Storage in the US.
• Database copies are kept there for about 30 days. We also keep database copies on the server itself for about 14 days.
• Files you delete are removed from the backup copy within about a day. We can still recover them for up to 7 days after that.
• Backups help us recover from problems, but please keep your own copies of documents you can't replace.

Export your data

On every plan, including Free and after a paid plan ends:

• Download a CSV of every active vendor and document from Import / export.
• Open or download any document file from the vendor's page.

On Starter and above you can also print the compliance report.

Delete your data

• Anyone on your team can delete a document from a vendor's Document history.
• The account owner can permanently delete a vendor and all of their documents and files.
• Deleted records can stay in our database backups for about 30 days, until those copies age out.
• To delete your whole account and everything in it, email us. We do it on request, as described in the privacy policy.
• Demo sandboxes are deleted automatically after 24 hours.

What GreenlightSubs doesn't do

GreenlightSubs doesn't verify coverage with insurers, and it isn't insurance or legal advice. It stores the documents and dates you and your vendors provide, shows their status and sends the reminders.