Privacy Policy
Last updated: November 6, 2026
The short version: we collect only what we need to run GreenlightSubs for you, we use it only to provide the service, and we never sell it. GreenlightSubs is operated by Varaporn Suwanthevarat, a sole proprietor based in Thailand.
What we store
- Account information: your name, email address, company name, a securely hashed password, your settings and your plan.
- Vendor contact information: the vendor names, contact names, email addresses, phone numbers, trades and notes that you (or an import you run) add.
- Uploaded documents: certificates, licenses, W-9s and other files uploaded by you or your vendors, along with details like issue and expiry dates, insurer and policy numbers.
- Activity records: a log of actions in your account (for example, “document approved”) and copies of emails GreenlightSubs sent, so you have an audit trail.
- Technical data: a session cookie to keep you logged in and protect forms, and standard server logs (such as IP address and browser type) used for security and troubleshooting.
- Visit counts: we count page views per page and referring site without cookies or storing IP addresses.
How we use it
Only to provide the service: showing your compliance dashboard, emailing your vendors upload links and reminders, sending you notifications and digests, processing payments, keeping the service secure, and answering your support requests. We don't use your data, or your vendors' data, for advertising, and we don't sell or rent it to anyone.
W-9s can contain taxpayer identification numbers. They're stored with the rest of your documents and are only accessible to people signed in to your account.
Who we share it with
We use a small number of service providers to run GreenlightSubs, and share only what each one needs:
- Paddle.com is our online reseller and merchant of record. It processes payments, billing details and sales tax. Card details go directly to Paddle and never reach our servers.
- An email delivery (SMTP) provider sends reminder, notification and account emails, so it processes recipients' email addresses and message content.
- Google Cloud hosts the server in the US where the application and your data are stored, and the separate Google Cloud Storage in the US where our backup copies are kept.
We may also disclose information if the law requires it, or to protect the rights and safety of our users.
Your vendors
When you add a vendor, we email them on your behalf with a private upload link. Their link only shows the documents you've asked them for. If a vendor wants their information removed, they can ask you (as the account holder) or contact us directly.
Security
Passwords are hashed, sessions use secure cookies, forms are protected against cross-site request forgery, and uploaded files are only served to signed-in members of the account that owns them. No system is perfectly secure, but we take reasonable measures to protect your data and will notify you without undue delay if a breach affects it.
How long we keep it, and deletion
We keep your data for as long as your account is open. You can delete vendors and documents yourself at any time. Every night we also copy the account database and uploaded files to separate Google Cloud Storage in the US. Copies of the database are kept there for about 30 days, and copies on the server itself for about 14 days, so deleted records can remain in those copies until they age out. Files you delete are removed from the backup copy within about a day, but we can still recover them for up to 7 days after that. To delete your whole account and everything in it, email us and we'll do it on request, usually within 30 days, apart from records we're legally required to keep (such as payment records).
Your choices
- Access, correct or export your data from within the app.
- Turn daily digest emails off in Settings.
- Ask us for a copy of your data or for it to be deleted.
Changes
If we change this policy we'll update the date above, and email account owners about significant changes before they take effect.
Contact
Questions or requests about your data? Email us at support@greenlightsubs.com.