Privacy Policy

1. Who We Are

PaidUp is operated by Regan Johnston trading as PaidUp (ABN: 93 640 127 502), an Australian sole trader. Our service is available at getpaidup.live. When we say "PaidUp", "we", "us" or "our" in this policy, we mean Regan Johnston trading as PaidUp.

If you have any questions about this policy or how we handle your data, contact us at support@getpaidup.live.

2. What Information We Collect

We collect information in two ways — information you give us directly, and information generated automatically when you use the service.

Information you provide:

• Your name and email address when you create an account
• Your business name and ABN (optional, used for invoice generation)
• Bank and payment details you enter into invoice templates (stored only in your browser session, not on our servers)
• Client details you enter when creating a chase — client name, email address, invoice number, and amount owed
• Payment information processed through Stripe when your clients pay invoices

Information generated automatically:

• Email open and click events (when your clients open chase emails) — used to show you engagement data in your dashboard
• Timestamps of actions such as chase creation, email sends, and payments
• Basic usage data such as which features you use, to help us improve the product

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the PaidUp service
• Send automated chase emails to your clients on your behalf
• Process subscription payments for Solo and Pro plans
• Show you analytics about your chase activity and recovery rates
• Send you transactional emails such as payment confirmations and account notifications
• Improve and develop the PaidUp product based on usage patterns
• Respond to your support requests

We do not use your information for advertising. We do not sell your data to any third party. We do not use your client data for any purpose other than sending the chase emails you instruct us to send.

4. Third-Party Services

PaidUp uses the following third-party services to operate. Each has its own privacy policy governing how they handle data:

• Supabase — database and authentication. Your account data and chase records are stored on Supabase's infrastructure. Supabase Privacy Policy →
• Stripe — payment processing for subscription billing and client invoice payments. We do not store card details — all payment data is handled directly by Stripe. Stripe Privacy Policy →
• Resend — email delivery. Chase emails sent to your clients are delivered via Resend's infrastructure. Resend Privacy Policy →
• Vercel — hosting and serverless infrastructure. Our application runs on Vercel's platform. Vercel Privacy Policy →

All third-party providers we use are reputable services with strong data protection practices. We have data processing agreements in place where required.

5. Your Client's Data

When you add a client to PaidUp and launch a chase, you provide us with your client's name and email address. This information is used solely to send the chase emails you request. We do not contact your clients for any other purpose, we do not market to them, and we do not share their information with anyone other than Resend for the purpose of email delivery.

You are responsible for ensuring you have a legitimate basis to provide your client's contact details to PaidUp. By using PaidUp you confirm that the debts you are chasing are genuine and that you have a lawful right to pursue them.

6. Data Retention

We retain your account data and chase history for as long as your account is active. If you delete your account, your data is removed from our active systems within 30 days. Some data may be retained for longer periods in secure backups, which are purged on a rolling 90-day cycle.

Email delivery logs (including open tracking data) are retained for 12 months to support your ability to use chase history as legal evidence in debt recovery proceedings.

7. Data Security

We take the security of your data seriously. Our security measures include:

• All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
• Database access is protected by Supabase's Row Level Security — you can only access your own data
• Passwords are hashed and never stored in plain text
• Payment card data is never stored on our servers — all card processing is handled by Stripe's PCI-compliant infrastructure
• API keys and secrets are stored as environment variables, never in code

No system is completely secure. If you become aware of any security vulnerability in PaidUp, please contact us immediately at support@getpaidup.live.

8. Cookies

PaidUp uses minimal cookies. We use session cookies to keep you logged in — these are strictly necessary for the service to function. We do not use tracking cookies, advertising cookies, or any third-party cookies for analytics purposes.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — you can request a copy of the personal data we hold about you
• Correction — you can update your account information at any time from Settings
• Deletion — you can delete your account from Settings → Danger Zone, or by emailing us
• Portability — you can export your chase history at any time using the CSV Export feature (Solo and Pro plans)
• Objection — you can object to certain processing of your data by contacting us

To exercise any of these rights, email support@getpaidup.live. We will respond within 30 days.

10. Australian Privacy Act

PaidUp complies with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). If you are an Australian resident and believe we have not handled your personal information in accordance with the APPs, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. International Users

PaidUp is operated from Australia. If you access PaidUp from outside Australia, your data will be transferred to and processed in Australia and potentially other countries where our third-party providers operate (including the United States). By using PaidUp, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

12. Children

PaidUp is intended for use by adults and businesses. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has created an account, please contact us at support@getpaidup.live.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes we will notify you by email or by displaying a prominent notice in the app. The date at the top of this page indicates when the policy was last updated. Continued use of PaidUp after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the way we handle your data, please contact us: