At ExpireLater, we treat your data with the same respect we treat our own. This policy outlines how we collect, use, and protect the information you provide while managing your critical infrastructure and digital assets.

1. Information We Collect

1.1 Account Information

When you register for an account (via email or third-party OAuth like Google/GitHub), we collect basic profile details: your name, email address, and authentication tokens required to securely identify you.

1.2 Asset Information

To provide our core service, we collect the details you input regarding your assets, including asset names, URLs, expiration dates, and custom notes.

1.3 Usage Data

We may collect anonymous analytics data regarding how you use the platform (e.g., page views, feature usage) to help us improve the service.

2. How We Use Your Information

We use your data explicitly to deliver and improve ExpireLater:

Sending timely notifications for upcoming expirations via your chosen channels (Email, Slack, etc.).
Managing your account and providing customer support.
Analyzing anonymous system metrics to monitor reliability and fix issues.
Syncing your asset calendars securely.

3. Data Storage and Security

Your data is stored in managed cloud infrastructure with access controls and operational monitoring. We keep secrets outside the frontend bundle and use HTTPS for data in transit.

4. Third-Party Services

We integrate with essential third-party services to deliver functionality. We never sell your data to these services.

Authentication: Google OAuth, GitHub OAuth.
Notifications: Cloudflare Email Service, Telegram API, webhook providers, Bark, WeCom, and Lark.
Analytics (Optional): Minimal tracking providers for product metrics.

5. Cookies & Tracking

We use strict, essential cookies required to keep you logged in and secure your session. We provide opt-in consent for any non-essential analytics cookies used for evaluating traffic.

6. Data Sharing & Disclosure

What We DON'T Do:

We never sell, rent, or lease your personal information or asset lists to any third parties for advertising or marketing. Your infrastructure mapping is strictly confidential.

When We May Share Data:

Only when legally compelled by a court order or when strictly necessary to provide the service via trusted infrastructure sub-processors (e.g., database hosting).

7. Your Rights

You retain complete control over your data. You may request an export of your asset lists at any time, and you hold the right to permanently delete your account and all associated data from our servers.

Privacy Policy