Privacy Policy
Last updated July 16, 2026
Overview
This policy explains what information useHandoff (“we,” “us”) collects when you visit our website, sign up for an account, or use the product, and how we use and protect it. If you have questions, email us at [email protected].
Information you give us
When you submit our signup form, we collect your organization name, your name, and your email address. Once your firm is active, your staff and clients may provide additional information through the product itself — client names and emails, project details, and any documents, text answers, or notes uploaded to a checklist.
Cookies, analytics & session replay
We use Google Analytics to understand how visitors use our website and product, such as which pages are viewed and how long a session lasts. We also use a session replay tool that records anonymized interactions (clicks, scrolls, page views) so we can diagnose bugs and improve the interface. Neither tool is used to build advertising profiles or sold to third parties, and both can be blocked with standard browser privacy settings or extensions.
How we use information
We use collected information to operate the product (authenticate you, deliver magic-link and transactional emails, store your uploads), review and approve new signups, respond to support requests, and understand and improve how useHandoff is used. We do not sell personal information.
Who we share it with
We share information only with the service providers that make useHandoff work: Mailtrap (email delivery), Cloudflare R2 (file storage), and Google Analytics (website/product analytics, see above). Each processes data only on our behalf and only as needed to provide their service.
Data retention
Uploaded files and checklist content persist until a vendor explicitly deletes them — there is no automatic purge. Account information is retained for as long as your organization remains active, or as needed to comply with legal obligations.
Security
All traffic is encrypted over HTTPS. Passwords are hashed with argon2id and never stored or logged in plain text. Magic links and password-reset links are single-use, expire quickly, and are only ever redeemed through a deliberate action, never automatically.
Your rights
You can request a copy of, a correction to, or deletion of your personal information at any time by emailing [email protected].
Children’s privacy
useHandoff is a business tool and is not directed at, or knowingly used by, children.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.