Privacy Policy
Last updated: 9 October 2026
Evergreen Deadline is run by Tofu Labs ("we"). This page explains what we store and why.
Our customers (you)
A workspace has no name attached. We keep a scrambled copy (a hash) of your workspace key, your campaign settings and, if you subscribe, your Paddle subscription number. Paddle handles your payment details; we never see your card.
If you add a recovery email, we keep it to send you sign-in links and plan-limit alerts (at 80% and 100% of your monthly new deadlines), and nothing else. If you connect Kit, we keep your Kit API key encrypted and use it only to write each person's deadline into the Kit fields you chose.
Your subscribers and visitors
When a deadline starts, we store the subscriber's email address, encrypted (AES-256), so you can see and export your own list. Only your workspace sees it, in your dashboard and its CSV export. We also keep a keyed hash of the address (to find their deadline without opening the encrypted copy), the start and end time, how the deadline started, a visit count and, if your thank-you page reports one, when they bought and the amount. Deadlines started before 9 October 2026 kept only the hash and a short form such as j•••[email protected] until the person next shows up. If you import people from a file, we store the same for each of them. For visitors with no email we store a random ID, kept in their browser's local storage on your site. We don't use cookies, sell data, or track people across sites.
We also keep the last 30 calls to each campaign's webhook address, with the subscriber addresses in them encrypted the same way, so you can see in your dashboard what each call did. Removing a person on the People tab also takes their address out of this list.
You are the controller of your subscribers' data and we process it for you only to show their deadlines. Tell your subscribers about it in your own privacy policy. Email us if you need a data processing agreement or want a campaign's data deleted; we delete leads 12 months after their deadline ends.
Logs and providers
We run on Cloudflare (hosting and database), which keeps short-lived request logs for security. Paddle processes payments as Merchant of Record. Resend delivers the emails we send you (sign-in links and alerts).