Paysoon

Privacy Policy

Effective October 15, 2026

This policy explains how Paysoon ("we") handles personal data in Paysoon. We keep it simple: we collect what we need to run the Service, we don't sell data, and we don't use advertising trackers.

1. Our role

  • For your account (if you sign up), we are the controller of your data.
  • For your clients' data that you add to send reminders, you are the controller and we are your processor, acting on your instructions under our Data Processing Addendum.

2. What we collect

  • Account data: email address, name or business name, reply-to address, email sign-off, timezone and your password (stored only as a salted, one-way scrypt hash).
  • Invoice data you add: client names and email addresses, invoice numbers, amounts, dates, payment links and notes or messages.
  • Activity data: when reminders are sent, and when a client views their invoice page or responds (for example "I've already paid").
  • Billing data: handled by Stripe. We receive your subscription status and a customer ID; we never see or store full card numbers.
  • Technical data: IP addresses and request details are processed briefly for security (rate limiting and abuse prevention) and may appear in short-lived server logs. We do not use them to track you.

3. Why we use it, and our legal bases

  • To provide the Service you signed up for: sending your reminders, showing your dashboard, account emails (performance of a contract).
  • To keep the Service secure and prevent abuse, fraud and spam (legitimate interests).
  • To handle billing and meet tax and accounting obligations (contract; legal obligation).
  • To send a weekly summary of your invoices, which you can turn off in Settings (legitimate interests).

We do not sell personal data, "share" it for cross-context behavioral advertising, or use it to train advertising profiles.

4. If you received a reminder from one of our users

You received it because a business you dealt with added an invoice for you to Paysoon. That business decides what to send; we send it on their behalf. Every reminder lets you say you've already paid, report a problem, say you don't recognize the invoice, or unsubscribe, and we stop reminders from that sender to your address automatically. For anything else, contact the business directly (just reply to the email) or contact us.

5. Who we share data with

Only service providers that help us run Paysoon, under contracts that require them to protect it:

  • Email delivery (Resend), to send reminders and account emails.
  • Payments (Stripe), to process subscriptions.
  • Hosting and infrastructure, to run the application and store its database.

We may also disclose data if required by law, or to protect the rights, safety and property of our users, the public or us.

6. Cookies

We use only strictly necessary cookies: one that keeps you signed in, and one that protects forms against cross-site request forgery. We don't use analytics, advertising or tracking cookies, so there's nothing to opt into.

7. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and the UK Addendum.

8. How long we keep data

  • Account and invoice data: until you delete it or delete your account.
  • Account emails and logs: up to 90 days. Reminder history: as long as the invoice exists.
  • Backups: kept for up to 14 days, after which deleted data is gone from them too.

9. Security

We use encryption in transit (HTTPS), hashed passwords, hashed session tokens, strict security headers, rate limiting, least-privilege access and automated backups. No system is perfectly secure, but we work hard to protect your data and will notify you and the relevant authorities of a breach where the law requires.

10. Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California law), you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to certain uses, and to complain to a data protection authority. You can export all your data and delete your account yourself in Settings, or contact us at MelloDaMonke193@gmail.com. We won't discriminate against you for exercising your rights. If you're a client of one of our users, we may refer your request to that business, since they control your data.

11. Children

Paysoon is not intended for anyone under 18, and we don't knowingly collect their data.

12. Changes

We'll post any changes here and update the date above. For significant changes we'll notify account holders by email.

13. Contact

Paysoon. Email: MelloDaMonke193@gmail.com.