ReqPub

Legal

Privacy Statement

Last updated June 30, 2026

This Statement explains what personal information ReqPub, provided by [ReqPub, Inc.], collects, how we use and share it, and the choices you have. It applies to our website, the ReqPub app, and related services.

Draft template. Modeled on common SaaS privacy statements; not legal advice. Have counsel tailor it to your actual data practices, sub-processors, and jurisdictions, and complete every [bracketed] placeholder.

1. Information we collect

We collect:

  • Account information, such as your name, email, organization name, and role, when you sign up or are invited.
  • Content you provide: requirements documents, notes, discovery records, and feedback you create or submit. SMEs and Partners may submit notes and reviews through shared links.
  • Usage and device data, such as log data, approximate location derived from IP, browser type, and interactions, used to operate and secure the service.
  • Cookies and similar technologies, as described in our Cookie Policy. Analytics cookies are used only with your consent.

2. How we use information

We use personal information to provide, secure, maintain, and improve ReqPub; to authenticate users and enforce role-based access; to deliver shared and curated views to the recipients you authorize; to communicate with you about the service; to comply with legal obligations; and to detect and prevent fraud, abuse, and security incidents.

3. Legal bases (where applicable)

Where the GDPR or similar laws apply, we process personal information on the bases of performance of a contract, our legitimate interests (such as securing and improving the service), your consent (such as for analytics cookies), and compliance with legal obligations.

4. Roles and your data

ReqPub is role-based. An Organization controls the Content in its workspace; its Managers and Viewers can see Organization Content per their role. Partners and SMEs see only the curated SME version of the documents shared with them, plus their own submissions. If you are an SME or Partner, the Organization that invited you is the controller of the Content you contribute, and you should direct data requests to them; we act as a processor on their behalf for that Content.

5. How we share information

We share personal information with: service providers and sub-processors who host and operate the platform under contract (for example, our database and hosting providers); other users as required by the role-based features you use (for example, a Manager seeing a Viewer’s edits, or an Organization receiving an SME’s notes); and authorities when required by law or to protect rights and safety. In a merger or acquisition, information may transfer subject to this Statement.

6. We do not sell your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Depending on where you live, you may still exercise choices through our Your Privacy Choices page.

7. Data retention

We retain personal information for as long as your account or Organization is active and as needed to provide the service, then for a reasonable period to comply with legal obligations, resolve disputes, and enforce agreements. You can request deletion as described below; some data may persist in backups for a limited time.

8. Security

We use administrative, technical, and organizational measures designed to protect personal information, including authentication, role-based access controls, and encryption in transit and at rest where supported by our infrastructure. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object or withdraw consent. To exercise these rights, contact us at [privacy@reqpub.example]; we will verify and respond as required by law. You may also use Your Privacy Choices and manage cookies at any time. We will not discriminate against you for exercising these rights.

10. International data transfers

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers. [State your primary processing region and sub-processor locations.]

11. Children

ReqPub is not directed to children and is intended for users at least [16] years old. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this Statement

We may update this Statement from time to time. We will post the updated version with a new “Last updated” date and, for material changes, provide additional notice.

13. Contact us

For privacy questions or requests, contact [privacy@reqpub.example] or [ReqPub, Inc., mailing address]. [If you have an EU/UK representative or DPO, list them here.]