Privacy Policy

1. Who we are

submit.ly is operated by Boldbit Ltd. For firm accounts we are a data controller of account data and a processor of the client documents you collect. Contact: support@submit.ly.

2. Data we collect

• Account data — name, email, workspace name and billing status.
• Client data entered by firms — client names, email addresses and any notes.
• Documents uploaded by clients through a request link, plus metadata such as filename, size and upload time.
• Usage data — activity logs within a workspace (sends, reminders, uploads, approvals) and standard server logs.

3. How we use it

To provide the Service: deliver request and reminder emails, store and serve documents, keep an activity trail, and process payments. We do not sell personal data or use client documents for any purpose other than providing the Service to the firm that requested them.

4. If you are a client of a firm

You received a link because a firm you work with asked for documents. The firm decides what to request and how long to keep it. To exercise your data rights (access, correction, deletion) contact the firm directly; we will assist them.

5. Where data is stored

The Service runs on Cloudflare. Documents are stored in Cloudflare R2 and application data in Cloudflare D1, encrypted at rest and in transit. Transactional email is sent through Cloudflare Email Service. Payments are processed by Stripe, which handles card details — we never see them.

6. Retention

Documents and requests are retained while the firm's account is active or until the firm deletes them. Closed accounts are deleted within 30 days. Server logs are kept for up to 30 days.

7. Cookies

We use a strictly necessary session cookie to keep you signed in and a preference cookie for light/dark mode. No advertising or cross-site tracking cookies are set.

8. Your rights

You can access, correct, export or delete your data from your account settings or by emailing us. You may lodge a complaint with your supervisory authority (in the UK, the ICO).