Privacy Policy
Last updated: 30 August 2026
The short version
Overdue collects the minimum needed to send your invoice reminders and charge you for Pro. We do not sell data, we don't show ads, and you can export or delete everything you give us.
What we collect
Account details so you can sign in; the invoices, clients and ladders you add; email events (sent, opened, replied) so the ladder can stop when a client answers; and billing data handled by Paddle, our merchant of record, which processes payments and holds no card data on our servers.
What we don't do
We do not read your stored invoice contents for any purpose other than drafting your reminders and showing you your ledger. We do not train models on your data. We do not send email from your account without your sequence turning it on.
Emails
Reminder emails are sent from your sender address via Resend, our transactional email provider. Standard open and click events are tracked so we can pause a ladder the instant a client replies or pays.
Subprocessors
Your data moves through a small number of subprocessors, and nothing more: Vercel (hosting the app), Supabase (authentication, database and row-level security), Resend (sending and receiving reminder emails), Paddle (billing, as merchant of record), the AI provider you enable for drafting reminders, and the invoice providers you connect yourself (Stripe, PayPal or Xero). Each is bound to a written data-processing agreement.
Your clients' data
When you add a client to Overdue, you are the controller of their personal data and Overdue processes it only on your instructions — to render your ledger and send the reminders you configured. You're responsible for a lawful basis to contact them (we do not cold-email).
Your rights
If you're in the EEA, UK or elsewhere with data-protection law, you may access, correct, export, restrict or delete your data, and object to processing, at any time from your dashboard or by emailing hello@getoverdue.online. We respond within 30 days. Reminder emails are processed on the basis of the contract you agree to when you send them.
Retention & deletion
You can export or delete your account at any time and we will remove your invoices, clients, sequences and messages within 30 days, or sooner on request. Billing records are retained by Paddle as required by law. International transfers are covered by standard contractual clauses when they occur across borders.