> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pcnaid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy Policy

> Privacy policy, data collection, sub-processor disclosures, and data retention for DelegatedSSL.

# Privacy Policy

**Last updated:** January 2027 · Operated by Pcnaid Inc.

## 1. What we collect

* **Account & identity:** name, email, and organization membership, managed through Auth0 when you sign in.
* **Billing:** handled directly by Stripe. We store your subscription status and plan, not full card numbers.
* **Domain & DNS data:** the domains you add, the client they are grouped under, and the validation/certificate status associated with each.
* **Verification link activity:** when a client opens or completes a verification link, so you know delegation succeeded.
* **Audit & usage data:** an internal log of account and domain changes (who, what, when) used for the audit log feature and to operate the Service reliably.

## 2. How we use it

* To operate the Service: validating domains, issuing and renewing certificates, sending verification links, and showing accurate status in your dashboard.
* To bill your organization for the plan you have selected, via Stripe.
* To respond to support requests and, where you have asked us to, security disclosures.
* To maintain the audit log and account security features.

## 3. Who we share it with

We use a small number of infrastructure sub-processors: Auth0 (authentication), Stripe (billing), Supabase/Postgres (database, with Row-Level Security), Cloudflare (certificate issuance and edge rate limiting), and Resend (transactional email delivery).

We do not sell personal data, and we do not share domain or client data across organizations. Row-Level Security enforces that boundary at the database layer.

## 4. Client verification links

When your client opens a verification link, we process only what is needed to complete DNS verification (the domain, the record status, and a timestamp). Clients are not required to create an account, and we do not use verification-link activity for marketing purposes.

## 5. Cookies

This site uses only essential cookies required for authentication and session handling. We do not currently use third-party advertising or analytics cookies.

## 6. Data retention

We retain organization, domain, and audit log data for as long as your organization is active, plus a limited period afterward for legal, billing, and security purposes. You can request deletion as described below.

## 7. Your rights

You can request access to, correction of, or deletion of personal data associated with your account by emailing **[privacy@delegatedssl.com](mailto:privacy@delegatedssl.com)**. We will respond and, where deletion is requested, remove data that we are not otherwise required to retain (for example, for billing records).

## 8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date on this page.

## 9. Contact

Questions about this Privacy Policy can be sent to **[privacy@delegatedssl.com](mailto:privacy@delegatedssl.com)**. Security-specific reports go to **[security@delegatedssl.com](mailto:security@delegatedssl.com)**.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.