Skip to content
Skip to Content
YOUR PRIVACY MATTERS

Privacy Policy

We believe in transparency about how we collect, use, and protect your personal information.

Last Updated: March 19, 2026

Privacy at a Glance

Our Commitments

  • We're transparent about what data we collect and why
  • You have control over your personal information
  • We use industry-standard security measures
  • We comply with GDPR, CCPA, and applicable privacy laws

Your Rights

  • Request access to your personal data
  • Correct inaccurate information
  • Request deletion of your data
  • Export your data in a portable format

Important: This is a summary. Please read the full policy below for complete details.

Privacy Policy

1. Information We Collect

We collect information you provide directly (account details, business information), information automatically collected (usage data, device information), and information from third parties (payment processors, identity verification services).

Types of information we collect:

  • Account and business information (name, email, company details)
  • Payment and transaction data (invoice details, payment methods)
  • Usage data (how you interact with our platform)
  • Device information (IP address, browser type, operating system)
  • Fraud prevention data (payment risk scores, authentication results, IP addresses associated with payment attempts, velocity patterns)

2. How We Use Your Information

We use your information to provide and improve our services, process payments, communicate with you, ensure security, prevent fraud, and comply with legal obligations. We do not sell your personal information to third parties.

Primary uses:

  • Process payments and provide invoicing services
  • Maintain, improve, and secure our platform
  • Provide customer support and respond to inquiries
  • Send important service updates and communications
  • Prevent fraud, abuse, and ensure platform security through risk scoring, velocity monitoring, IP tracking, and 3D Secure authentication

3. Information Sharing

We share your information only as necessary to provide services or comply with legal obligations. We do not sell personal information.

We may share information with:

  • Payment processors (Stripe) and financial institutions to process transactions
  • Service providers who assist our operations (email, SMS, hosting)
  • Law enforcement when required by applicable law or legal process
  • Professional advisors (lawyers, accountants) for business purposes

4. Data Storage and Retention

We store your information for as long as necessary to provide services, comply with legal obligations, and resolve disputes. When you request deletion, we remove or anonymize your personal information, subject to legal retention requirements.

Retention periods:

  • Account data: While your account is active plus 90 days
  • Transaction records: 7 years for regulatory compliance
  • Support communications: 3 years
  • Security logs: 2 years for fraud prevention

5. Your Privacy Rights

You have rights regarding your personal information under applicable privacy laws (GDPR, CCPA, etc.). To exercise these rights, contact us at [email protected].

Your rights include:

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request removal of your personal information
  • Portability: Export your data in a machine-readable format
  • Objection: Object to certain types of data processing

Important: Some rights may be limited by legal requirements or legitimate business needs such as fraud prevention. We will respond to requests within legally required timeframes.

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal information including encryption, access controls, regular security assessments, and employee training. However, no system is 100% secure.

Security measures include:

  • Encryption for data in transit (TLS/SSL) and at rest
  • Multi-factor authentication and role-based access controls with 7-tier permission system
  • 3D Secure (3DS/SCA) authentication for card payments to verify cardholder identity
  • Stripe Radar machine learning for real-time fraud detection and risk scoring
  • Rate limiting and velocity controls to prevent card testing and brute-force attacks

7. Cookies and Tracking

We use cookies and similar technologies to run the platform, understand how it is used, and measure our advertising. Except for strictly necessary cookies, we only set cookies after you opt in. When you first visit, analytics and marketing cookies are disabled by default until you accept them in our cookie banner.

We use Google Analytics and Google Ads, loaded through Google Consent Mode. Until you grant consent, these services do not store analytics or advertising cookies and receive only limited, cookieless signals. You can accept all cookies, reject non-essential cookies, or choose specific categories.

Categories of cookies we use:

  • Strictly necessary cookies — required for core features such as sign-in and payments; these cannot be disabled.
  • Analytics cookies — help us understand how the site is used so we can improve it (off until you opt in).
  • Marketing cookies — used to measure ad campaigns and show relevant ads (off until you opt in).

Important: To review, change, or withdraw your consent at any time, select "Cookie preferences" in the website footer.

8. International Data Transfers

Your information may be processed in the United States and other countries where our service providers operate. We use Standard Contractual Clauses and other safeguards to protect your information when transferred internationally.

Transfer safeguards:

  • Standard Contractual Clauses (SCCs) for international transfers
  • Adequacy decisions where available
  • Security measures consistent with this policy

9. Policy Updates

We may update this privacy policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or platform notification. The 'Last Updated' date indicates when the policy was most recently revised.

Update process:

  • Email notification for material changes
  • 30-day advance notice for changes requiring new consent
  • Continued use after updates constitutes acceptance

Questions About Privacy?

We're here to help with any privacy-related questions or concerns

Privacy Team

[email protected]

Data Protection Officer

[email protected]
General ContactTerms of Service