Last updated: October 16, 2026
This policy explains what information EngageCycle ("we", "us") collects, how we use it, and the choices you have.
Two kinds of information
- Information about our customers and visitors. Business owners and staff who use EngageCycle, and people who visit our website, try the demo, or join the waitlist. We decide how this information is used.
- Information our customers put into EngageCycle about their own clients. Names, email addresses, prices, and the proposals a business sends. The business decides how this information is used, and we handle it on the business's behalf. If you're a client of a business that uses EngageCycle, that business's privacy policy applies, and you should contact them first with questions or requests.
What we collect
- Account information: your name, email, password (stored only as a secure hash), two-step verification setup, and your business's name, address, and contact details.
- Your clients' information, as your business enters it: names, email addresses, phone numbers, prices, notes, and selections on proposals.
- Signing records: when someone views or signs a proposal, the time, IP address, browser and device, the link used, their name and email, and their selections and signature. These make up the audit certificate on the signed PDF.
- Offers: answers and an email address from people who respond to a business's public offer.
- Demo and waitlist: your name, email, and any optional answers about your business. If you tick the box, we also email you a check-in and occasional news.
- Billing: payments are handled by Stripe. We receive your billing contact, plan, and payment status, but never your full card or bank details.
- Website visits: on our public marketing website only, the pages you visit, how you got there, your device and browser, and your approximate location, collected through Google Analytics (see Cookies below).
- Technical information: server logs (IP address, browser, pages requested, errors) used for security and to keep the service running.
What we don't collect: EngageCycle has no field for Social Security or other government ID numbers, or for bank, routing, or card numbers, and our terms don't allow them to be entered.
How we use information
- To run EngageCycle: send proposals and email, record signatures, produce signed PDFs, and deliver events to the systems you connect.
- To keep accounts and the service secure, prevent abuse, and investigate problems.
- To bill for plans and extra proposals.
- To support you when you ask for help.
- To email you about your account, and, if you opted in, about EngageCycle. You can unsubscribe from marketing email at any time.
We don't sell personal information, we don't show ads, and we don't use your clients' information for anything except running EngageCycle for you.
Cookies
The app, client pages, and signing pages. EngageCycle itself (where businesses sign in) and the pages a business's clients use (viewing, signing, and offer pages) use only the cookies needed to sign you in and keep your session secure. They use no analytics and no advertising cookies. Some forms use Cloudflare Turnstile to block bots.
Our public marketing website. The public pages on engagecycle.com (the home, pricing, security, terms, privacy, demo, and signup pages) use Google Analytics to understand how people find and use the site, for example which pages are visited and which ones lead to signups. Google Analytics sets cookies in your browser and receives your page address (with personal details removed from it), the pages you view, your browser and device, and your approximate location. We ask it to anonymize IP addresses, and we don't send it your name, email address, or business name. We don't use it for advertising, and we turn off Google's advertising features. To opt out, you can block cookies in your browser or use Google's browser add-on for opting out of Google Analytics.
Who we share information with
We use a small number of service providers to run EngageCycle, each only for its part of the service:
- Cloudflare: network, security, bot protection, and file storage (signed PDFs and uploads)
- Resend: sending email
- Stripe: payments
- Google: Google Analytics, on our public marketing website only. It isn't used in the app or on client, signing, or offer pages.
- Our hosting provider: the servers that run the application and database
A business may also connect EngageCycle to its own tools (for example, through webhooks or its own email provider). Information sent to those tools is handled under that business's arrangements with them.
We may disclose information if the law requires it, to protect the rights and safety of our customers or others, or as part of a sale or reorganization of our business, in which case this policy continues to apply.
Support access
Our staff can see a business's data only to help that business or keep the service safe. Every support access needs a stated reason and is logged.
How long we keep information
- Account information is kept while your account is open.
- Signed proposals, certificates, and PDFs are legal records. They are kept for 7 years after a business closes its account, then deleted.
- Demo runs are deleted after 7 days.
- Backups are kept for up to 30 days.
- Unsubscribe records are kept so we keep honoring them.
Security
Connections are encrypted. Each business's data is kept separate from every other business's. Signing links are long random values that can't be guessed, and we store only a fingerprint of them. Passwords are hashed, stored credentials are encrypted, and every login uses two-step verification.
Your choices and rights
You can view and update your account information in EngageCycle, and ask us to access, correct, or delete your information by contacting us. Depending on where you live, you may have additional rights under local law. We'll respond within the time the law requires. If you're a client of a business that uses EngageCycle, please contact that business; we'll help them respond.
Children
EngageCycle is for businesses and isn't directed to children under 18.
Changes to this policy
We'll post any change here and update the date above. For a material change, we'll email account owners before it takes effect.
Contact
Questions about privacy: [email protected]