Privacy Policy

Effective July 5, 2026

1. Who we are

PaidYet (“we,” “us”) sends automated payment reminder emails on behalf of freelancers and small businesses (“users”). This policy explains what we collect, why, and the choices available to both our users and the people who receive reminder emails (“recipients”).

2. Information we collect from users

Account data: email address, password (stored as a salted hash — we never see it), your name and business name.
Invoice data you submit: client names and email addresses, invoice numbers, amounts, due dates, payment links, notes, and any invoice PDFs you upload.
Billing data: handled by Stripe. We store only a customer reference and your plan level — never card numbers.
Usage data: standard server logs (IP address, browser type, pages visited) used for security and debugging.

3. Information about recipients

Users provide us with their clients' names and email addresses so we can send reminders about real invoices. We process this information solely on the user's instructions. We also record whether reminder emails are opened (see Section 5). We do not use recipient information for advertising, we do not sell it, and we do not contact recipients for any purpose other than the reminders the user configured.

If you received a reminder email: the sender is the business named in the email, using PaidYet as their tool. You can stop reminders about an invoice at any time using the stop link in the email footer. For questions about the invoice itself, reply to the email — replies go directly to the sender, not to us.

4. How we use information

to operate the Service: schedule, send, and track the reminders users configure;
to authenticate accounts and secure the Service;
to process subscription payments;
to respond to support requests;
to comply with legal obligations.

We do notsell personal information, and we do not use your data or your clients' data for third-party advertising.

5. Email open tracking

Reminder emails may include a standard tracking mechanism that tells the sending user whether their reminder was opened and how many times. This exists so users know their reminder was seen. It does not collect the contents of a recipient's inbox or any information beyond the open event.

6. Service providers (subprocessors)

We rely on a small set of infrastructure providers to run PaidYet:

Supabase — database, authentication, and file storage;
Vercel — application hosting;
Resend — email delivery;
Stripe — payment processing.

Each provider processes data only as needed to provide its service to us, under its own security and privacy commitments.

7. Data retention and deletion

We retain your data while your account is active. If you delete your account, we delete your account data, invoices, client records, and uploaded files within 30 days, except records we must keep for legal, billing, or fraud-prevention purposes. Recipients who opt out are recorded so we can honor the opt-out — that record is kept as long as needed to enforce it.

8. Security

Data is encrypted in transit (TLS) and at rest by our providers. Access to production data is limited to the operator. Invoice PDFs are stored in a private bucket accessible only to the uploading user and the sending engine. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live (including under the CCPA and GDPR), you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Users can exercise most of these directly in the app; for anything else — including recipient requests — email us and we will respond within 30 days. We do not discriminate against anyone for exercising privacy rights.

10. Children

The Service is for business use and is not directed to anyone under 18. We do not knowingly collect information from children.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or in-app notice before they take effect.

12. Contact

Privacy questions or requests: support@paidyet.app