Privacy Policy

1. Data we collect

We collect the information you enter to create and manage complaints. This includes the phone number being spammed, the email ID you use with the service, the company you choose, timestamps showing which complaint stage you marked as sent, and any issue reports, feedback, or company-onboarding requests you submit.

We also keep limited technical data that keeps the product working, including the signed-in session cookie, a short-lived pending-verification session during OTP flows, security and abuse-prevention records, product analytics identifiers when analytics is enabled, and browser-side storage such as theme preference and locally restored complaint-contact details.

The service is designed to reduce routine exposure of contact details. Normal application records use masked identifiers, keyed lookup values, and encrypted contact storage rather than plain-text email and phone fields in day-to-day database queries.

2. How we use your data

We use your data to operate the service you asked for. That includes:

• showing the correct escalation path for the selected company and preparing complaint drafts on your device
• authenticating you through the OTP flow and maintaining your signed-in session
• restoring your contact details to your signed-in device when needed so local complaint drafting works
• showing complaint history, waiting windows, and case status inside the dashboard
• handling support, privacy, abuse, correction, and onboarding requests
• preventing abuse, debugging issues, and protecting the service

We do not auto-send emails on your behalf from our own mailbox. You review and send the complaint from your own inbox.

3. Sharing and disclosure

We do not sell your personal data. We may share data only where it is necessary to run the service, protect the service, or comply with law.

• hosting, database, and infrastructure providers that help us run the product
• our product analytics provider, currently PostHog, when analytics is enabled for the service
• professional advisers where reasonably necessary
• authorities or legal processes where disclosure is required by law or necessary to prevent misuse

We do not publish your complaint details publicly. Public company pages are guides and do not expose your account data.

4. Retention

The pending verification session expires after about 10 minutes. The session cookie can remain for up to 30 days unless you log out sooner. Theme preference, analytics identifiers, and locally restored draft-contact details can stay in your browser until they are cleared or reset.

Account records, encrypted contact storage, complaint history, onboarding requests, and feedback data may be kept while your account remains active and for up to 12 months after the last complaint activity so we can support follow-up, investigate misuse, and maintain an auditable complaint trail. If you ask us to delete your data earlier, we will review and act on that request unless we need to keep limited records for security, fraud prevention, or legal compliance.

5. Your choices and rights

You can contact us to:

• request a copy or summary of the account-linked data we still hold about you
• request correction of your email ID, phone number, or other account-linked data
• request deletion of your account and complaint history
• withdraw consent for us to keep using the data you submitted to operate the service
• report a stale company guide or incorrect public resource

The fastest route is the Contact / Privacy / Grievance page or nomoreloansplease@gmail.com.

If you are signed in and want to remove your account data directly, use the Delete my data flow. We will send a one-time code to your verified email before deleting anything.

When deletion is completed from a signed-in device, we also try to clear the locally restored complaint contact details and product analytics identifiers on that device. If you used other browsers or devices, you should log out there and clear local browser data if you want those local copies removed too.

6. Security and limits

We use reasonable administrative and technical steps to protect the service and the data stored in it. These include encrypted contact storage, keyed lookup values for account matching and abuse controls, CSRF protections, and browser-side draft generation so complaint text and compose links are not stored in normal case records. No online system is perfectly secure, and we cannot promise absolute security.

Access to unmasked contact details is intentionally limited. Where we need to decrypt contact details for support, privacy, or account-recovery reasons, that access is meant to be explicit and auditable.

This service is intended only for individuals who are 18 years of age or older. We do not knowingly permit minors to create accounts or use the service. If we learn that an account belongs to a person under 18, we may suspend and delete the account and related data, subject to limited retention required for security, fraud prevention, or legal compliance. Do not use the service for another person unless you are authorised to do so and the submitted details are accurate.

7. Changes to this policy

We may update this policy as the product, data flows, or legal requirements change. The latest version will be published on this page with a revised last-updated date.