Draft. The operator’s details and this text are pending professional review before launch.
Privacy Policy
Last updated 29 September 2026
1. Who we are
[Operator’s legal name] (tax ID [Tax ID], [Registered address]) runs Paydue. This policy explains what personal data Paydue handles, why, and your choices. Contact us about privacy at privacy@paydueapp.com.
2. Our two roles
- For your account (you, the business using Paydue), we’re the controller: we decide how that data is used, as described here.
- For your clients’ data in your documents (names, emails, addresses), you’re the controller and we process it only on your instructions, to run Paydue for you. If your client asks us about their data, we’ll pass the request to you.
3. What we collect
| Data | Where it comes from |
|---|---|
| Sign-in: an identifier from Sign in with Apple. We don’t ask Apple for your name or email. | Apple, when you sign in |
| Business details: name, address, tax ID, contact details you add, default currency. | You |
| Documents and clients: invoices, estimates, receipts, saved clients and items, and the details on them. | You |
| Emails you send: recipient, subject, message, and whether each was delivered, bounced, or opened through its link. | You, our email provider, your clients’ link visits |
| Payments: amounts, dates, status, and Stripe references. Never card numbers or bank logins. | You, Stripe |
| Expenses: amounts, merchants, categories, and receipt photos. Photos are read on your iPhone, not by an outside service. | You |
| Subscription status: whether your business has Paydue Pro. | Apple, RevenueCat |
| Device data: an installation identifier and, if you allow notifications, a push token. | Your iPhone |
| Technical logs: time, request type, and error codes. Links your clients open are never logged in full. | Our servers |
We don’t use advertising, tracking, or analytics tools, we set no cookies, and we don’t sell personal data.
4. Why we use it
| Purpose | Legal basis |
|---|---|
| Providing Paydue: your account, documents, sending, payments, reminders, sync between your devices, exports | Performing our contract with you |
| Paydue Pro subscription status | Performing our contract with you |
| Keeping Paydue secure, preventing abuse and spam, fixing problems | Our legitimate interest in a safe, working service |
| Answering your messages | Our legitimate interest in helping you, or our contract |
| Meeting legal obligations and requests from authorities | Legal obligation |
We don’t make decisions about you based solely on automated processing.
5. Who else handles it
We use these providers to run Paydue. Each only gets what it needs, under a contract that protects your data.
| Provider | What for | Where |
|---|---|---|
| Fly.io | Servers, database, and file storage (including Tigris storage) | Frankfurt, Germany |
| Postmark (ActiveCampaign) | Sending your documents and reminders by email | United States |
| Stripe | Online payments and payment accounts | EU and United States |
| Apple | Sign in with Apple, in-app purchases, push notifications | United States and others |
| RevenueCat | Subscription status. Receives only a random identifier for your business, never names or emails. | United States |
| Google Workspace | Our support and privacy mailboxes | EU and United States |
We may also share data if the law requires it, to protect rights and safety, or with a buyer if the business is sold, under this policy.
6. Transfers outside Europe
Where a provider handles data outside the European Economic Area, the transfer is protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission’s Standard Contractual Clauses.
7. How long we keep it
- While you have an account, we keep your data so Paydue works.
- When you delete your account, your business’s data is erased from Paydue at once: documents, clients, expenses, files, and sign-in, and links you’ve sent stop working. Encrypted backups kept by our hosting provider are overwritten on a rolling basis.
- Providers keep some records under their own duties: Stripe keeps payment records, Apple keeps purchase records, and our email provider keeps sending logs for a limited time.
- Technical logs are kept for a short period.
Businesses usually have to keep invoices and records for years. Export them before deleting your account; that obligation is yours.
8. Your rights
Depending on where you live, you can ask to access, correct, delete, or export your personal data, to restrict or object to its use, and to withdraw consent where we rely on it. Much of this is in the app: edit your details, export your records (More › Export for your accountant), and delete your account (More › Account › Delete account). For anything else write to privacy@paydueapp.com; we answer within one month.
You can also complain to a data protection authority, in Spain the Agencia Española de Protección de Datos (aepd.es), or the one where you live.
9. Security
Data travels encrypted and is stored encrypted by our providers. Each business’s data is kept separate. Sign-in sessions are short-lived and tied to your device. Links to your documents are long, random, expire, and can be turned off. Access to production systems is limited.
10. Children
Paydue is for businesses and isn’t meant for anyone under 18.
11. Changes
We’ll update this policy when our practices change and tell you in the app or by email about important changes. The date at the top shows the latest version.