Privacy Policy

1. Who we are

Automatdo Inc ("RenewalWin," "we," or "us") provides failed-payment audits, recovery tools and reports for businesses using HighLevel. This policy covers our website, applications, support communications and RenewalWin’s own optional account SMS program. Client Recovery processes email-only recovery; Agency Recovery’s optional SMS remains subject to separate acceptance. Consent to RenewalWin’s own SMS program does not authorize messages from customer businesses. Our business mailing address is 2042 Wooddale Drive, Suite 250, Woodbury, MN 55125, United States. Our privacy and SMS consent contact is Ryan Schuetz, Automatdo Inc, at support@renewalwin.com. Our first response is within 24 hours.

For customer records processed on a business's behalf, that business decides why the records are used and which accounts to connect; we process them to provide the service under its instructions. We manage our own business contact, support, security and subscription records. If you are a customer of a business using RenewalWin, its privacy notice also applies.

2. Data we process

Depending on the connected accounts and enabled features, we receive information from you, authorized users, connected-platform APIs and webhook notifications:

• Account and access information: business, location and user identifiers, names, time zones, notification addresses, installation and subscription status, permissions, and encrypted access and refresh tokens.
• Customer and payment records: names, email addresses, phone numbers, communication preferences, subscription and transaction identifiers, amounts, currencies, statuses, failure reasons, retry information and provider-hosted payment links.
• Recovery and reporting records: case history, configured messages, schedules, delivery attempts and provider responses, operator actions, branding, report PDFs and report-sharing activity.
• Technical and support records: API snapshots and webhook payloads, billing events, session and security records, installation-source codes, service logs, and information you provide in support or sender-verification requests.

Some payment snapshots and webhook records retain the full information supplied by the connected platform, rather than only the fields displayed in RenewalWin. Reports and payment links may contain sensitive customer or financial information; share them only with authorized recipients.

RenewalWin does not intentionally collect card numbers, security codes, bank-account credentials or your HighLevel password. Customers enter payment details on the payment provider's hosted page. Please do not include these details in messages or support requests.

3. How we use it

We use this information to connect and authorize accounts, identify failed renewals, apply communication preferences, provide enabled recovery workflows, recognize observed payments, create reports, administer plans and billing, answer support requests, and protect the service against misuse. Installing the free audit does not itself enable recovery outreach.

We also record installation starts and completions with an optional referral code to understand which sources lead to an installation. This measurement does not use cross-site advertising identifiers.

4. Service providers and sharing

We share information with authorized users of the connected business and recipients with whom they choose to share reports. We use Amazon Web Services for hosting, databases, private report storage and operational logs, and Google Workspace for business email and support correspondence. Our primary application infrastructure is in the United States; service providers may also process information in other countries.

HighLevel supplies connected-account data and the communication channels used by enabled workflows. Payment providers such as Stripe host payment pages and supply payment information through the connected platform. These services also have their own agreements with you; they are not all vendors hired by RenewalWin to act on our behalf.

We may disclose relevant information to meet legal requirements, protect rights and security, or support a business transaction subject to appropriate protections. We do not sell personal information or use customer payment records for targeted advertising.

RenewalWin account SMS privacy

Enrollment in RenewalWin’s own optional account SMS program is currently closed. When enrollment opens, we collect the name and mobile number you submit, your consent choice, submission time, invitation and account reference, the source page, and the exact disclosure and policy versions presented. We use these records to document your preference, confirm account eligibility, respond to requests and enforce consent. Checking the box records an affirmative choice; an unchecked submission is retained as a choice without new consent. A submission does not by itself verify phone ownership or activate messaging.

We do not sell, rent, or share mobile information with third parties or affiliates for their marketing or promotional purposes. Text-message opt-in data and consent are not shared with third parties for their marketing. We disclose only the information needed by service providers that help us store consent records, support customers and deliver authorized messages, such as Amazon Web Services and HighLevel/LeadConnector and their messaging providers. These restrictions also apply to the sharing described elsewhere in this policy.

The intake stores invitation codes as one-way hashes; it does not include them in public evidence or analytics. We keep consent and withdrawal evidence separate from public screenshots. Authorized staff review records before any application permission is entered. The form does not clear prior opt-outs or enable sending.

We keep affirmative SMS consent, related withdrawal evidence and policy snapshots while permission remains active and for three years after the latest of withdrawal, the last message or account closure. We keep submissions without new consent for 90 days and unused invitations for 30 days after their seven-day validity expires. We retain the minimum number, sender, purpose and withdrawal-time information needed to respect a withdrawal while this SMS program operates, review it annually, and remove it within 90 days after permanent program retirement unless a documented hold applies.

Our privacy operator reviews due records monthly and carries out approved deletions. A documented legal, security or dispute-related hold may require longer retention and is reviewed annually. We explain applicable limitations when responding to a verified request. Operational intake logs are kept for 30 days and exclude form content. Working export copies are removed within 30 days after the request is completed; download access is removed after confirmed receipt or seven days, whichever is earlier. Our intake database has a 35-day rolling backup window, so removal from active storage does not immediately remove every backup or separately retained provider copy. Before using restored data, we reapply recorded withdrawals and approved deletions.

Email support@renewalwin.com for access, correction, withdrawal, export or deletion requests. We verify identity and authority and respond first within 24 hours. SMS enrollment remains closed pending carrier verification and final sending acceptance. Publishing this schedule does not activate messaging.

5. Retention and deletion

Uninstalling or disconnecting an installation revokes its stored access credentials and stops dependent automated work. Messages already sent cannot be recalled. Separately authorized installations may remain active.

Uninstalling does not automatically delete historical data. Customer records, payment snapshots, webhooks, case and message history, reports, branding and billing records remain stored until separately removed. There is currently no automatic deletion schedule for these records. Expiration of a report link prevents its further use but does not delete the underlying report.

To request deletion or an export, contact support@renewalwin.com. We verify the requester's authority and review the records involved, including data shared between installations. Legal, billing, security and dispute-related obligations may require retaining some records. Backup copies have separate retention cycles; removal from an active system does not immediately remove every backup. We will explain applicable limitations when responding to a request.

6. Website storage, analytics and security

Optional website analytics is currently disabled. The following describes the consent controls that will apply if analytics is enabled.

The marketing website stores your selected light or dark theme in your browser. Application sessions and installation flows use browser storage or cookies needed for authentication and account connection. Hosting services record request information, which can include an IP address, requested URL, browser information and time of access.

With your permission, we use Google Analytics to understand visits to this website and clicks that start the free-audit installation flow. Google receives browser and device information, approximate location information and a cookie-based browser identifier. Our event fields omit URL query strings and fragments, and include only the referring site's origin. We do not send customer payment records, account credentials or customer contact details to Analytics. An audit-button click is measured separately from a completed installation.

The Google tag loads only after you allow analytics. You can decline or withdraw permission through Analytics preferences in the footer. We remember your choice for 90 days and configure analytics cookies to expire after 90 days without extending that period on every visit. Withdrawal stops further measurement and removes the site's Analytics cookies; it does not retroactively erase information already processed by Google.

Google Analytics is configured without advertising integrations or Google signals. Learn how Google uses information from sites that use its services. We set user-level and event-level retention to two months without resetting the period on new activity; aggregated reports may remain available for longer. Contact support about privacy requests.

Our safeguards include encrypted application credentials, HTTPS, account-scoped access controls, webhook verification and private report storage. No system can guarantee absolute security. Contact support promptly if you suspect unauthorized access, and do not send passwords or payment credentials.

7. Choices and privacy requests

Depending on applicable law, you may have rights to access, correct, export or delete personal information, or to restrict or object to certain uses. Email support@renewalwin.com to make a request. We may need information to verify your identity and authority, but will not ask for your password or full card number.

If your information belongs to a business's customer records, contact that business first. We can help it respond to verified requests within the scope of our service. You may also have a right to raise a concern with the privacy authority responsible for your location.

Recovery messages use the connected business's sender identity. That business is responsible for obtaining required consent and maintaining accurate communication preferences. Enabled workflows check supported opt-out and do-not-disturb settings; these controls do not replace the business's legal responsibilities. Contact the sending business to manage your communication preferences.

8. Changes to this policy

We will update the effective date when this policy changes and provide notice of material changes through the service or business contact address where required. Questions about this policy can be sent to support@renewalwin.com.