Privacy Policy

This policy explains what information [Company legal name] (“we”) collects through PaidFinch, how we use it, and the choices you have. It covers two groups of people: our customers, the businesses and people who use PaidFinch; and their clients, who receive invoices and other documents from them.

1. Information we collect

• Account information: your name, email address, password (stored only as a secure hash), and the businesses you add, including their names, addresses, logos, and settings.
• Information you enter about your clients: names, company names, email and postal addresses, phone numbers, notes, and the invoices, proposals, time entries, retainers, and payments related to them.
• Payment information: card and bank details are entered on pages run by Stripe and go to Stripe, not to us. We receive and keep payment records from Stripe, such as amounts, dates, fees, and status. For cards a client saves for automatic charges, we keep the card brand, last four digits, and expiry date, and the record of the client’s permission (the text they agreed to, when, their IP address, and browser).
• Client activity: when a client opens an invoice or proposal page, downloads a PDF, accepts or declines a proposal, or asks a question, we record that activity so the business can see it.
• Email delivery: whether emails we send were delivered, bounced, or marked as spam, as reported by our email provider.
• Technical information: IP addresses, browser type, and server logs, used for security, preventing abuse, and fixing problems.

2. How we use it

• To provide PaidFinch: storing your records, sending emails you ask us to send, showing your clients their documents, and processing online payments through Stripe.
• To bill the Pro plan and calculate platform fees.
• To keep the service secure, prevent fraud and abuse, and meet legal obligations.
• To support you and tell you about changes to the service, your account, or these policies.

We do not sell personal information, and we do not use your clients’ information for our own marketing.

3. Who we share it with

• Stripe, which processes online payments for each business on that business’s own Stripe account, and bills our Pro plan.
• Postmark, which delivers the emails PaidFinch sends.
• Cloudflare Turnstile, which checks that sign up, sign in, and password reset forms are used by people, not bots.
• Our hosting provider, which runs the servers PaidFinch is stored on, in the United States.
• Authorities or others when the law requires it, to protect rights and safety, or as part of a merger or sale of the business, in which case this policy continues to apply.

4. Your clients’ information

When a business uses PaidFinch to invoice its clients, that business decides what information to collect about them and how to use it. We process that information on the business’s behalf to provide the service. Clients with questions or requests about their information should contact the business that sent them the invoice; we will help the business respond.

5. Cookies

PaidFinch uses only the cookies needed to run it: keeping you signed in, remembering the business you are working in, and protecting forms against forgery. We do not use advertising or analytics cookies, so we do not show a cookie banner.

6. How long we keep it

We keep your information while your account is open. When you close it, we delete it within a reasonable time, except records we must keep for legal, tax, accounting, fraud prevention, or dispute purposes, and backup copies that are overwritten on their normal schedule. Data exports you create are deleted after 7 days.

7. Security

Connections to PaidFinch are encrypted. Passwords are hashed, credentials for connected services are stored encrypted, and each business’s records are kept separate from every other’s. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

8. Your choices and rights

• You can see and change most of your information in your account, and export all of it from Settings at any time.
• You can ask us to access, correct, or delete your personal information by emailing support@paidfinch.com. Depending on where you live, you may have other rights under laws such as the California Consumer Privacy Act; we will honor them as those laws require.
• You can unsubscribe from non-essential emails. Emails about your account, billing, and security are part of the service.

9. Children

PaidFinch is for businesses and is not meant for anyone under 18. We do not knowingly collect information from children.

10. Changes

We will post changes here and update the date above. For material changes, we will tell you by email or in your account before they take effect.

11. Contact

[Company legal name], [mailing address]. Email: support@paidfinch.com.