Owedable Privacy Policy
Draft for attorney review. Version 0.9, 30 September 2026.
Owedable (to be incorporated as Owedable, LLC, Delaware) ("Owedable") provides accounts-receivable automation software to businesses. This policy explains what we collect, why, and your choices. Contact: privacy@owedable.com.
1. Who this covers
- Clients: businesses that use Owedable, and the people who sign up and use it on their behalf.
- Customer contacts: people at a Client's business customers whose details appear on invoices and who receive payment reminders sent by the Client.
- Visitors to owedable.com.
2. What we collect
| From | Data | Why |
|---|---|---|
| Clients | Name, work email, business name and address, state, payment card (held by Stripe; we store only a token and last four digits) | Account, billing, state eligibility |
| Clients' accounting systems (QuickBooks Online, Xero), with the Client's authorisation | Customer names, business contact emails and phones, invoice numbers, amounts, dates, payment status | Identifying overdue invoices, drafting reminders, detecting payment, calculating fees |
| Clients' email accounts (Gmail, Microsoft 365), with authorisation | Sending reminders from the Client's address; reading replies to those reminders only | Sending and routing replies |
| Customer contacts | Replies they send to reminders | Sorting the reply (dispute, promise, paid, question) and routing it to the Client |
| Visitors | Standard server logs and calculator inputs (not linked to a person) | Running and securing the site |
We do not collect Social Security numbers, consumer credit information, or data about consumers' personal debts. We do not use tracking advertising cookies.
3. How we use data
To provide the Service; to draft reminders and sort replies using AI models (Anthropic's API, which does not train on our data); to send transactional email through our email provider; to bill fees through Stripe; to secure, support and improve the Service; and to meet legal obligations. We do not sell personal data and do not use Client or customer data to train AI models.
4. Sharing
Only with processors that help us run the Service (hosting: Vercel; database: Supabase; AI: Anthropic; email: Resend or the Client's email provider; billing: Stripe), each under contract; with the Client whose data it is; and when required by law or to protect rights. Processors are listed and updated at owedable.com/subprocessors.
5. Retention and deletion
Client data is kept while the account is active. Clients can disconnect their accounting and email connections and delete their data from Settings at any time; we delete personal data within 30 days, keeping only billing and legal records for the periods required. Reply text from customer contacts is kept for the life of the related invoice record plus 12 months, so the Client has a record of the conversation.
6. Security
Data in transit is encrypted (TLS). Access tokens and data at rest are encrypted. Access is limited to staff who need it. If a breach affects personal data, we notify affected Clients without undue delay and within the periods state law requires, and help them notify their customers where required.
7. Your rights
Depending on your state, you may have rights to access, correct, delete or port personal data, or to opt out of certain processing. Clients can exercise most rights in Settings; anyone can email privacy@owedable.com. Customer contacts who receive a reminder can reply to stop further messages about that invoice, and can contact the Client (the sender) or us. We do not discriminate for exercising rights.
8. International
Owedable operates in the United States. Data is stored in the United States. Owedable's owners may be located outside the United States; access from outside the US is limited to administering the Service.
9. Children
The Service is for businesses and not directed at anyone under 18.
10. Changes
We will post changes here and, for material changes, email Clients 30 days in advance.