Privacy Policy
PoliteDue is payment reminder software for freelancers and small businesses. This policy explains what we collect, why, how long we keep it, and the one thing we will never do with your mobile number.
The short version: we collect the minimum needed to send the reminders you ask us to send, we never sell or share data, mobile numbers and consent records are never shared with third parties or affiliates for any purpose, and you can ask us to delete your data at any time.
1. What we collect
1.1 If you join the early-access list
- Your email address — to notify you when PoliteDue launches and to send product updates;
- The page that referred you and any UTM tags in the link you clicked — so we know which channel sent you, nothing more;
- Basic browser/device information from your user-agent string.
1.2 If you use the PoliteDue software (from launch)
- Account data: name, business name, email address, password hash, time zone, and notification preferences;
- Invoice data: invoice number, amount, due date, and the payment link you choose to include — we do not process payments or store card numbers;
- Your client's contact details — see section 1.3;
- Billing data: handled by our payment processor. We receive a customer ID, plan, and status — never your full card number.
1.3 Your clients' contact data — and consent records
To send a reminder for you, we process your client's name, mobile number or email address, invoice reference, and the dates and content of the messages sent. We also store the consent record you create when you add a number: your certification that the recipient is your existing client and has agreed to receive messages, the timestamp, the opt-in source you declare, and any opt-out.
That consent record exists for one reason: to protect you. If a recipient ever disputes a message, it is your evidence that consent existed. We keep it precisely because the law expects you to be able to produce it.
1.4 Message records
We keep a log of each message — recipient, timestamp, content, delivery status, and any opt-out — as a record of what was sent. This is both a product feature (you can see your own history) and a legal requirement of the messaging ecosystem.
2. Why we collect it
- To deliver the reminders you schedule, at the right local time, to the right person;
- To keep the consent and message records described above;
- To manage your account, billing, and support requests;
- To understand, in aggregate, which channels bring people to PoliteDue.
That is the whole list. We do not build advertising profiles, we do not run retargeting, and we do not sell or rent data to anyone.
3. Mobile numbers and consent data are never sold or shared
Mobile numbers, opt-in records, and consent data are never sold, rented, shared, or disclosed to third parties or affiliates for any purpose, including marketing. They are used only to deliver the messages the recipient agreed to receive. No mobile opt-in data is shared with any third party or affiliate for lead generation, marketing, or any other purpose.
The only parties with access are: (a) you, for your own client communications; (b) our messaging provider, which transmits messages on our instructions as a service provider; and (c) parties we must disclose to by law, such as a valid subpoena.
4. Who processes data on our behalf
- Cloudflare — website hosting and privacy-first analytics (no cookies, no cross-site tracking);
- Our SMS provider — message delivery to mobile networks. It receives the recipient's number, the message content, and delivery status for the sole purpose of transmitting the message;
- Our payment processor — subscription billing. Card data is entered on their systems, not ours;
- Our email provider — transactional email and launch notifications;
- Our error-monitoring provider — crash reports, with message content redacted.
Each acts as a processor on our documented instructions. If we switch providers, this page is updated before the switch takes effect.
5. Cookies and analytics
This site sets no advertising cookies and runs no third-party ad trackers. Our analytics is cookieless and aggregate: it tells us how many people visited a page, not who they are. Signup counts and referral sources are recorded server-side in aggregate to measure demand. If we ever add a cookie that identifies you, we will ask first.
6. How long we keep it
- Early-access emails: until PoliteDue launches and you convert to an account, or until you ask us to delete them — and never longer than 12 months after collection if no launch happens;
- Consent records and opt-out records: retained for at least four years after the last message to that number, because messaging law expects consent to be provable long after the fact;
- Message logs: four years, for the same reason;
- Account and billing records: for as long as your account is active, then as long as tax and accounting law requires;
- After account deletion: your invoice and client data is deleted within 30 days. Consent and message records may be retained in a restricted archive where law requires it — with no other use.
7. Security
Data is encrypted in transit, access is limited to what each role needs, and we log administrative access. No system is perfect; if a breach affects your data, we will notify affected users and any regulator required by law without undue delay.
8. Your rights
You can ask us to show you what we hold about you, correct it, export it, or delete it. Email privacy@politedue.com and we will act within 30 days. If you are in the EU or UK (GDPR) or California (CCPA/CPRA), these rights apply to you directly, including the right to know what we share (we do not sell data) and the right to non-discrimination for exercising them.
If you received a message and want your number removed from a specific business's reminders, reply STOP to the message, or write to us at the same address and we will route the request to that business.
9. Children
PoliteDue is a business tool for people 18 and older. We do not knowingly collect data from children.
10. Changes
If this policy changes materially, we will email everyone on the early-access list and notify account holders before the change takes effect.
11. Contact
Privacy questions and requests: privacy@politedue.com. General: hello@politedue.com. For messaging terms, see SMS Program Terms; for the software terms, see Terms of Service.