Privacy Notice

1. Who is responsible for your data

Paid is provided by Ryan Keane, a sole trader in the United Kingdom, trading as Paid. We are the data controller for personal data about our users. For the client details you add to Paid (your customers), you are the controller and we process that data on your behalf to send your reminders. Contact: hello@usepaid.co.uk.

2. What we collect and why

• Account details (name, email, login details, business name) — to create and run your account. Legal basis: contract.
• Invoice and client details you add (client names, emails, amounts, due dates, replies) — to send reminders and show your results. Legal basis: contract.
• Messages to our help assistant and support — to help you and improve our answers. Legal basis: contract and legitimate interests.
• Usage and device data (pages used, IP address, browser, email delivery events) — for security, fraud prevention and fixing problems. Legal basis: legitimate interests.
• Referral data (which link you signed up through) — to credit referral rewards. Legal basis: legitimate interests.
• Product updates — only if you agree; you can opt out at any time. Legal basis: consent.

Payment card details are collected by Paddle, not us.

3. Who we share it with

• Service providers who host our app and database, send our emails, and run the AI models that draft reminders. They only act on our instructions.
• Paddle, our Merchant of Record, for selling subscriptions, managing payments, tax compliance and invoicing.
• Professional advisers such as accountants and lawyers.
• Authorities, where the law requires it.

We never sell personal data, and we don't let AI providers train models on your data.

4. International transfers

Some providers may process data outside the UK. Where they do, we use safeguards such as UK adequacy regulations or the UK International Data Transfer Agreement / standard contractual clauses.

5. How long we keep it

We keep your data while your account is open. When you close it, we delete or anonymise it within 30 days, except records we must keep by law (such as tax records, usually 6 years).

6. Your rights

Under UK GDPR you can ask to access, correct, delete, restrict or move your data, object to how we use it, and withdraw consent at any time. Email us and we'll respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

7. Security

We protect data with encryption in transit, strict access controls so each business only sees its own data, and regular security checks.

8. Cookies

We only use essential cookies and local storage to keep you signed in and remember referral links. We don't use advertising cookies. You can clear them in your browser settings, but you'll be signed out.