Back to PAID

Privacy Policy

Last updated: 29 August 2026

PAID ("we", "us", "our") is an invoicing and payment tracking application for Australian small businesses. This Privacy Policy explains how we collect, use, store and protect your information when you use the PAID app and website (together, the "Service").

We are committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Information we collect

Account information: your name, email address, phone number and password (stored as a one-way hash). If you sign in with Apple or Google, we receive the name and email address that Apple or Google shares with us.

Business information: the business name, ABN, address, contact details, logo and bank account details you enter to set up your profile.

Customer and document information: the names, contact details and addresses of your customers, and the invoices, quotes, line items, notes and payment records you create.

Usage information: limited, aggregated logs that help us keep the Service secure and reliable (for example, error logs and feature usage counts).

2. How we use your information

  • To provide the invoicing, quoting and payment-tracking features you request.
  • To send invoices, quotes and payment reminders by email on your behalf when you choose to send them.
  • To process subscription payments for the Pro plan (web only) and manage your subscription.
  • To provide customer support and respond to your enquiries.
  • To maintain, secure and improve the Service.

3. Third parties we share information with

We only share information with service providers who help us operate the Service, and only as necessary:

  • Stripe — processes subscription payments (web only). Stripe receives your email and payment details and handles card data directly; we never see or store your card number.
  • Email delivery provider — sends emails you authorise (invoices, quotes, reminders) to your chosen recipients.
  • Apple / Google — provide Sign in with Apple and Sign in with Google for authentication.
  • Cloud hosting provider — stores your account and business data securely.

We never sell your personal information to third parties, and we do not use it for cross-app tracking or advertising.

4. Data retention and storage

We keep your business and customer data for as long as your account is active. When you delete your account through the app (Settings → Account → Delete account), we permanently erase your business profile, customers, invoices, quotes, line items, reminders and email logs, and cancel any active subscription. Some residual data may be retained in secure backups for a limited period, after which it is permanently deleted.

5. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, hashed passwords, and row-level access controls that ensure you can only access your own data. No method of transmission or storage is completely secure, but we work hard to safeguard your information.

6. Your rights

Under the Australian Privacy Principles you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or out-of-date information.
  • Request deletion of your account and associated data (available in Settings → Account).
  • Withdraw consent for us to handle your information (by deleting your account).

To exercise any of these rights, contact us through the Contact page.

7. Children

The Service is intended for use by businesses and is not directed at children under 16. We do not knowingly collect personal information from children.

8. International data transfer

Your data is stored on cloud servers that may be located outside Australia. Where this occurs, we take steps to ensure it is handled in accordance with the Australian Privacy Principles.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, notify you within the app.

10. Complaints

If you believe we have mishandled your personal information, please contact us. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Contact

For any privacy enquiries, please reach out through the Contact page.