Privacy Policy

Who we are

Overdue is operated by Adepoco, a California business wholly owned by Ross Shaw ("Adepoco," "we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect information when you visit overduepaid.com or use the Overdue service (the "Service"). Questions: support@overduepaid.com.

Information we collect

• Account information: your name, email address, and profile identifiers from Google when you sign in with Google.
• Workspace information: business name, sender name, reply-to address, payment links, templates, and settings you provide.
• Invoice and customer information: invoice numbers, amounts, currencies, due dates, and your customers' names and email addresses that you upload by CSV or sync from a Stripe account you connect.
• Billing information: subscription and purchase status from Stripe. Card details are entered on Stripe and are never stored by us.
• Email delivery information: send times, delivery, bounce, complaint, open, and click events reported by Resend.
• Usage and device information: IP address, browser type, pages viewed, referral source (including a ref code in a signup link), and similar logs collected by our hosting provider.
• Information you send us, such as support requests and survey answers like how you heard about Overdue.

How we use information

• Provide, operate, and secure the Service, including sending the reminder emails you set up.
• Process payments, manage subscriptions, and prevent fraud and abuse.
• Stop reminders automatically when an invoice is paid in a connected Stripe account.
• Respond to support requests and send service and account notices.
• Understand how people find and use Overdue so we can improve it.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell personal information and do not share it for cross-context behavioral advertising.

Service providers we use

We share information only with providers that help us run the Service, under contracts that limit their use of it:

• Stripe, for payments, subscriptions, and Stripe Connect account linking.
• Google, for sign-in with Google.
• Resend, for sending reminder and account emails and reporting delivery events.
• Neon, for database hosting.
• Vercel, for application hosting and delivery.
• Cloudflare, for domain, DNS, and bot protection (Turnstile).

We may also disclose information if required by law, to protect rights and safety, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply.

Your customers' data

When you upload or sync invoices, you control that data and we process it on your behalf to send reminders. You are responsible for having a lawful basis to email your customers. Recipients can unsubscribe or reply to you directly, and we honor bounces, complaints, and suppression requests.

Data retention

We keep account and workspace data while your account is active. If you delete your account or ask us to, we delete or anonymize your data within 30 days, except records we must keep for legal, tax, accounting, or fraud prevention purposes, and backups that expire on a normal schedule.

Security

We use encryption in transit, access controls, least-privilege credentials, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. We will notify you of a breach affecting your information as required by law.

Your rights and choices

Depending on where you live, including California under the CCPA as amended by the CPRA, you may have the right to know, access, correct, delete, or port your personal information and to opt out of sale or sharing (we do neither). We will not discriminate against you for exercising these rights. To make a request, email support@overduepaid.com. We may need to verify your identity. You may use an authorized agent.

Cookies

We use essential cookies for sign-in sessions and security, and a first-party cookie that remembers a signup referral code for up to 90 days. We do not use third-party advertising cookies.

Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their information.

International users

We are based in the United States and process information there. By using the Service, you understand that your information will be processed in the United States.

Changes to this policy

We may update this policy. If we make material changes, we will notify you by email or in the Service before they take effect. The date at the top shows when it last changed.

Contact

Overdue is operated by Adepoco, a California business wholly owned by Ross Shaw ("Adepoco," "we," "us," or "our"). Email support@overduepaid.com with any privacy question or request.