Privacy Notice

Overview

This privacy notice explains how PRIMEDROP LLC ("we," "us," or "our"), doing business as Dueflo, collects, uses, and shares your information when you use our web-based SaaS platform that helps small businesses automatically collect unpaid invoices by sending AI-generated follow-up emails.

Information We Collect

We collect the following categories of information:

• Contact details — names, email addresses, phone numbers, and business addresses
• Account credentials — usernames and encrypted passwords
• Device and usage data — IP addresses, browser information, and general location data
• Payment information — processed securely through Stripe; we do not store card details
• QuickBooks data — invoice and customer data accessed via read-only OAuth connection to provide the service

We do not process sensitive personal information (such as social security numbers, health data, or financial account credentials beyond what Stripe processes for billing).

How We Use Your Information

• To provide, maintain, and improve the Dueflo service
• To generate and send AI-written collection emails on your behalf
• To communicate with you about your account and the service
• To process payments and manage subscriptions
• To detect fraud and maintain platform security
• To comply with legal obligations

Third-Party Services

We share data with the following service providers to operate the platform:

• Anthropic — AI email generation (invoice and client data is sent to generate collection emails)
• Stripe — payment processing and subscription management
• Vercel — cloud hosting and infrastructure
• Supabase — database and authentication
• Resend — email delivery
• Intuit (QuickBooks) — accounting data integration

We do not sell your personal data to third parties.

Data Retention

We retain your data for as long as your account is active or as needed to provide the service. You may request deletion of your account and associated data at any time by contacting us. Some data may be retained for legal or compliance purposes after account deletion.

Your Rights

Depending on your state of residence, you may have the right to:

• Access the personal data we hold about you
• Correct inaccuracies in your personal data
• Request deletion of your personal data
• Opt out of targeted advertising (we do not currently conduct targeted advertising)

To exercise any of these rights, contact us at the address below.

Security

We implement industry-standard security measures including encrypted storage, HTTPS-only transmission, and access controls. QuickBooks OAuth tokens are encrypted at rest. However, no system is 100% secure and we cannot guarantee absolute security.

Contact Us

For privacy-related questions or requests: