**DRAFT — requires review by a licensed attorney before use.**
This document is a starting template, not legal advice. Do not
publish or rely on it until an attorney licensed in your
jurisdiction has reviewed and approved it.
Last updated: [EFFECTIVE DATE — fill on publication, after attorney review]
Company: PaidUp LLC, a Nevada limited liability company.
PaidUp is an invoice-reminder service for trade businesses.
This policy explains what data we collect, why, and what we do
with it.
Contact for privacy questions: privacy@paiduppro.com
When you sign up, we collect:
card numbers)
When you connect QuickBooks Online or Xero, we access and store:
line items
addresses, phone numbers, billing addresses
We only access the data needed to detect overdue invoices and
send reminders. We do not access payroll, employee, or tax data.
To send reminders, we use the contact details (name, email, phone)
from *your* accounting records. You are responsible for having
a lawful basis to share this data with us and for us to contact
these individuals on your behalf (see our Terms of Service).
We log every reminder sent: recipient, channel (email/SMS),
message content, timestamp, and delivery status. This lets you
audit what was sent and lets us prevent duplicate sends.
Standard server logs: IP addresses, browser type, pages visited,
timestamps. Used for security and debugging only. We use a single
secure session cookie to keep you logged in; it contains no
advertising or tracking data and is never shared with third parties.
send reminders, generate payment links, show your dashboard
(never sold, never shared with advertisers)
support responses
We do not sell your data. We do not use your customers'
contact information for our own marketing.
We share data only with the service providers needed to operate
PaidUp. Each processes data only as instructed by us:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing, payment links | Invoice amounts, payer email |
| Twilio | SMS delivery | Recipient phone number, message text |
| Resend | Email delivery | Recipient email, message text |
| Fly.io | Application hosting | All stored application data |
| QuickBooks / Xero | Accounting sync (read-only) | OAuth tokens; we read invoice data |
We do not share data with any other third parties except as
required by law.
encrypted volumes)
never your passwords
No system is perfectly secure. In the event of a data breach
affecting your information, we will notify you promptly as
required by law.
account is active, plus invoice/reminder history needed for
your records
90 days of cancellation, except where retention is required
by law (e.g., billing records for tax purposes)
for up to 90 additional days
You may at any time:
retention requirements above)
from your accounting provider's settings; we will stop syncing
immediately
To exercise these rights, contact privacy@paiduppro.com. We respond
within 30 days.
California residents: under the CCPA/CPRA you have the right
to know, delete, and opt out of sale of personal information.
We do not sell personal information.
Nevada residents: under Nevada Revised Statutes Chapter 603A,
you may opt out of the sale of your personal information. We do
not sell personal information.
If one of *your* customers contacts us about their data, we will
direct them to you as the data controller. We act as a data
processor for your customer information.
PaidUp is a business tool. We do not knowingly collect data from
children under 13. If we learn we have, we will delete it.
We will notify you by email of material changes at least 30 days
before they take effect. The current version will always be
available at https://paiduppro.com/privacy.