Draft for the owner to review. This is not a finished privacy notice. Have a lawyer check it against the laws that apply to you and your clients before you treat it as policy.

Privacy

Last updated 2026. This draft describes what the PayChase application stores.

Account data

We store your name, email, password hash, email verification state, and session version. We do not store your card number. Stripe stores payment methods.

Invoice data

We store the client name, client email, amount, currency, invoice number, due date, notes, status, reminder count, and the public pay token. The token is the secret in the pay link.

Stripe identifiers

We store your Stripe connected account id, whether charges and payouts are enabled, your Stripe customer id, and subscription id and status if you use Pro. Invoice records can store a Checkout session id and payment intent id.

Processors

Stripe processes Connect onboarding, Checkout, and Pro billing. Resend sends email if a Resend API key is configured. The app is set up to run on Render, which hosts the web service and Postgres database. TODO: the owner should confirm this list and add a contact for privacy requests. Draft contact: hello@paychase.online.

Why

We use this data to authenticate you, send the invoice and reminders you ask for, show you what is unpaid, and keep a paid invoice from being paid twice.

Retention

TODO: the owner should decide how long invoices and logs are kept and how a user can ask for deletion. Until that is written down, do not promise a specific retention period.