Privacy Notice

Overview

This privacy notice explains how PRIMEDROP LLC ("we," "us," or "our"), doing business as Dueflo, collects, uses, and shares your information when you use our web-based SaaS platform that helps small businesses automatically collect unpaid invoices by sending AI-generated follow-up emails.

Information We Collect

We collect the following categories of information:

• Contact details — names, email addresses, phone numbers, and business addresses
• Account credentials — usernames and encrypted passwords, or authentication via Google OAuth (name and email provided by Google)
• Device and usage data — IP addresses, browser information, and general location data
• Payment information — processed securely through Stripe; we do not store card details
• QuickBooks data — invoice and customer data accessed through an OAuth connection you authorize; Dueflo only reads this data and never modifies your QuickBooks records

We do not process sensitive personal information (such as social security numbers, health data, or financial account credentials beyond what Stripe processes for billing).

How We Use Your Information

• To provide, maintain, and improve the Dueflo service
• To generate and send collection emails and SMS reminders on your behalf
• To detect and classify replies your clients send to reminders, pause reminders, and forward replies to you
• To answer questions asked in our support chat; these conversations are logged to improve the service and our documentation
• To communicate with you about your account and the service
• To process payments and manage subscriptions
• To detect fraud and maintain platform security
• To comply with legal obligations

Third-Party Services

We share data with the following service providers to operate the platform:

• Anthropic — AI processing: generating collection emails (invoice and client data), classifying replies your clients send to reminders (reply content), and answering support-chat questions
• Stripe — payment processing and subscription management
• Vercel — cloud hosting and infrastructure
• Supabase — database and authentication
• Google — optional sign-in via Google OAuth (governed by Google's Privacy Policy)
• Resend — email delivery, receiving client replies to reminders, and newsletter subscriptions
• Telnyx — SMS delivery and opt-out (STOP/HELP) handling; receives client phone numbers and message content (Professional and Business plans)
• Trigger.dev — background job processing (invoice sync and reminder sending), which handles invoice and client data
• Upstash — rate limiting and job coordination (stores short-lived technical keys, not invoice content)
• Sentry — error monitoring; error reports may include technical context about the request or job that failed
• Google Analytics — website usage analytics and conversion measurement (uses cookies)
• Intuit (QuickBooks) — accounting data integration

We do not sell your personal data to third parties.

Data Retention

We retain your data for as long as your account is active or as needed to provide the service. You may request deletion of your account and associated data at any time by contacting us. Some data may be retained for legal or compliance purposes after account deletion.

Your Rights

Depending on your state of residence, you may have the right to:

• Access the personal data we hold about you
• Correct inaccuracies in your personal data
• Request deletion of your personal data
• Opt out of targeted advertising (we do not currently conduct targeted advertising)

To exercise any of these rights, contact us at the address below.

Security

We implement industry-standard security measures including encrypted storage, HTTPS-only transmission, and access controls. QuickBooks OAuth tokens are encrypted at rest. However, no system is 100% secure and we cannot guarantee absolute security.

Contact Us

For privacy-related questions or requests: