Privacy Notice
Last updated: June 14, 2026
NudgePay ("we", "us") is the data controller for the personal data described in this notice.
What we collect
- Account info: name, email, login credentials
- Invoice and client data you choose to add
- Usage data: pages viewed, actions taken, device and IP address
- Support messages you send us
Why we use it
- To provide the Service (account creation, sending reminders, dashboards)
- For security and fraud prevention
- To improve the product
- To respond to your support requests
Our legal bases are: contract performance (to deliver the Service), legitimate interests (to keep it secure and improve it), and consent (for optional marketing communications).
Who we share data with
- Hosting and infrastructure providers (Lovable Cloud / Supabase)
- Paddle.com Inc., our Merchant of Record, for payments, subscription management, tax compliance, and invoicing
- Professional advisers (legal, accounting) where needed
- Authorities where required by law
Retention
We keep your data for as long as your account is active. When you delete your account, we delete or anonymise your data within 90 days, except where we must retain it for legal or accounting reasons.
Your rights
Subject to your local laws, you have the right to access, correct, delete, restrict, or port your personal data, and to withdraw consent or object to processing. UK/EEA users can complain to their supervisory authority. We respond within one month.
International transfers
Data may be processed outside your country. Where it leaves the UK/EEA, we rely on Standard Contractual Clauses or adequacy decisions.
Security
We use industry-standard technical and organisational measures, including encryption in transit and at rest, and access controls.
Cookies
We use essential cookies to keep you signed in and protect against abuse. We do not use third-party advertising cookies.
Contact
Questions about privacy? Email privacy@nudgepay.app.