Privacy Policy
1. What we collect
About you (the account holder): your email address, your name, timezone and sending-hours settings, and billing status from Stripe (customer and subscription IDs, plan status). We don't see or store your card number. Stripe handles payment.
About your clients (entered by you): client name, client email, invoice number, amount, currency, due date, payment link and any note you add. We use these only to send the reminders you schedule and to show you your dashboard.
Sending records: for every email we keep the recipient, subject, time, provider message ID and whether it succeeded, to prevent abuse and to answer delivery questions. When a client uses the “Already paid?” link we record the time.
Technical data: IP addresses are processed briefly in memory for rate limiting and security. We use one essential cookie to keep you signed in. No advertising or analytics cookies.
2. Sending on your behalf
For client data, you decide what to send and to whom, and we process it on your instructions. You're responsible for having a lawful basis to contact your client about their invoice. Your clients can reply to any reminder to reach you directly, or contact us to ask about data we hold for an account.
3. Who we share data with
- Resend (email delivery) receives each email's content and recipient to send it.
- Stripe (billing) processes your subscription.
- Fly.io (hosting) stores the database on servers in the United States.
We don't sell personal information or use client data for marketing.
4. How long we keep it
Invoice and client details are kept until you delete the invoice or your account. Sending records are kept for up to 24 months for abuse prevention. Sign-in links expire after 20 minutes and sessions after 30 days.
5. Your choices
You can edit or delete invoices at any time. To export or delete your account data, email us. If you're a client who received a reminder and believe it was sent in error, email us and we'll look into it and can block further reminders to your address.
6. Security
Data is sent over HTTPS. Sign-in tokens and session IDs are stored only as one-way hashes. No method of storage is perfectly secure, but we limit what we collect.
7. Who we are
PayNudge is operated by Nick Quigley, sole proprietor, Florida, USA. Contact: scalocityco@gmail.com