Privacy Policy

INTerms ("INTerms", "we", "us") operates the website and application at interms.pro. For questions about this policy or your data, contact hello@mahmoudomar.com.

• Account information. Your email address, your name if you provide one, and — if you sign in with Google — the email address, name and profile picture Google returns to us. We never receive your Google password.
• Document content. The information you enter into a document form: company names, individual names, job titles, dates, payment terms, salary figures, addresses and any other field the template asks for. This is stored against your account so you can reopen and edit your documents.
• Recipient details. Where a document records a recipient, we store the recipient's name and email address alongside the document.
• Purchase records. Whether you have purchased, the date, the amount and currency, your Stripe customer and transaction identifiers, and any promo code used. We never see or store your card number — card details go directly to Stripe and never reach our servers.
• Usage records. A log of which documents you generated and downloaded, and standard technical data (IP address, browser type, timestamps) created by our hosting providers.

We do not run advertising trackers, analytics pixels or third-party marketing scripts on this site.

Most documents you create describe someone else — an employee, a contractor, a client. When you enter their details, you decide what is collected and why; we only process it to produce and store the document for you. In data protection terms, you are the controller of that information and we act on your instructions.

You are responsible for having a lawful reason to enter another person's details, and for telling them how their information is used where the law requires it. Please do not enter more sensitive information than the document actually needs.

Your finished .docx and .pdf files are generated inside your own browser, from the field data on your device. The completed file is not uploaded to us and we do not keep a copy of it. What we store is the form data behind it, so the document can be regenerated when you open it again.

• To provide the service: create your account, generate and store your documents.
• To take and record payment, apply promo codes, and unlock purchased features.
• To send transactional email — sign-in links, password resets, purchase confirmations. We do not send marketing email without your consent.
• To keep the service secure, prevent abuse, and diagnose faults.
• To meet accounting and legal obligations.

Where the GDPR applies, our legal bases are performance of our contract with you (providing the service and taking payment), our legitimate interests (security, abuse prevention, improving the product), and legal obligation (tax and accounting records).

We do not sell your information and we do not share it for advertising. We use a small number of service providers who process data on our behalf:

• Supabase — database, authentication and server functions. This is where your account and document data lives.
• Vercel — website hosting and content delivery.
• Stripe — payment processing. Stripe handles your card details under its own privacy policy.
• Google — only if you choose to sign in with Google.
• Our transactional email provider — to deliver account and purchase emails.
• Pushover — we receive an operational alert when a purchase is made, which includes the buyer's name, email address and the amount paid.

We may also disclose information where we are legally required to, or to protect our rights or the safety of others.

Our providers operate globally, so your information may be stored or processed outside your country, including outside the EEA and the UK. Where that happens we rely on the safeguards offered by those providers, such as standard contractual clauses.

Account and document data is kept for as long as your account exists. If you delete a document, it is removed from your account. If you close your account, we delete your account and document data, except for purchase and tax records, which we keep for as long as accounting law requires. Operational logs are kept for a short period and then rotated out.

Data is transmitted over encrypted connections and stored on managed infrastructure with access controls, and documents are scoped to your account by database-level row security. No system is perfectly secure, so please use a strong, unique password and tell us at hello@mahmoudomar.com if you think your account has been accessed by someone else.

Depending on where you live, you may have the right to access, correct, delete, export or restrict the processing of your personal information, and to object to it. You can edit or delete your documents at any time from your dashboard. For anything else, email hello@mahmoudomar.com and we will respond within 30 days. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.

INTerms is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact hello@mahmoudomar.com and we will delete it.

We may update this policy as the product changes. We will update the date at the top, and for material changes we will notify you by email or in the app. Continuing to use INTerms after a change means you accept the updated policy.

Questions, requests or complaints: hello@mahmoudomar.com. See also our Terms of Service.