Privacy Policy
This policy explains what SteadyChase (“SteadyChase”, “we”) collects, why, who we share it with, and the choices you have. We collect only what we need to chase your unpaid invoices, and we never sell personal information.
Who this covers
- Our users: businesses, and the people at them, who sign up for SteadyChase.
- Our users’ customers: people and businesses who receive reminders or use a payment page. For their information we act on behalf of the business that invoiced them, which decides what is collected and why.
What we collect
From you, when you use SteadyChase
- Account details: your name, email address, password (stored only as a secure hash) and, if you use it, your Google profile name and picture.
- Business details: business name, country, time zone, reply-to email and branding you add.
- Billing details: your plan and billing history. Card details are handled by Stripe; we never see or store full card numbers.
- Usage information: sign-in times, actions you take in the app, and the browser each session was started from, used for security.
From your accounting software, when you connect it
- Invoices: numbers, dates, amounts, balances, currency and status.
- Customers: names, email addresses and phone numbers.
- Access tokens that let us read and write on your behalf. These are encrypted, and we delete them when you disconnect.
From your customers
- What they tell us on the payment page: a date they plan to pay by, a question about an invoice, or a request to pay in instalments.
- Replies to text reminders, the number they came from, and a record of when and by whom their agreement to receive texts was noted. Replies of STOP are honoured straight away.
- Payment confirmations from Stripe (amount, date, status). Card and bank details go straight to Stripe.
- If they turn on automatic payments: their authorisation, the date, and a reference to the card or bank account saved with Stripe on the business’s Stripe account (such as “Visa ending 4242”). We never see or store full card or bank numbers.
How we use it
- To run the service: sync invoices, send the reminders you set up, add late fees, take payments and record them in your books.
- To check an invoice is still unpaid right before anything is sent, so nobody is chased after paying.
- If the business leaves it on, to read customers’ replies with AI and suggest what they mean and a possible answer. The reply and the invoice details it’s about are sent to Anthropic for this, and aren’t used to train models.
- To bill your subscription, keep accounts secure, prevent abuse, and answer support requests.
- To send you service emails, such as sign-in links and important changes. We’ll only send marketing email if you agree, and you can unsubscribe at any time.
We don’t use data from your accounting software for advertising, and we don’t use it to build products for anyone else. We don’t use it to train AI models.
Who we share it with
We share information only with the service providers below, only for the purposes listed, and under contracts that protect it:
| Provider | What for | Where |
|---|---|---|
| Intuit (QuickBooks Online) | Reading your invoices and customers; recording payments and late fees | USA |
| Xero | The same, if you connect Xero instead | USA / Australia |
| Stripe | Your subscription billing, and your customers' payments to you | USA |
| Resend | Sending reminder and account emails | USA |
| Twilio | Sending text reminders, only to customers who agreed to texts | USA |
| Neon | Database hosting | USA |
| Railway | Application hosting | USA |
| Anthropic | Reading customer replies to suggest a response (only if the business turns it on; not used to train models) | USA |
We may also share information if the law requires it, to protect people’s safety or our rights, or as part of selling or merging our business, in which case this policy continues to apply.
Cookies
We use one essential cookie to keep you signed in, and short-lived cookies during sign-in with Google or connecting your accounting software. We don’t use advertising or tracking cookies.
How long we keep it
- While your account is open, we keep what we need to run the service and show your history.
- When you disconnect your accounting software, we delete its access tokens straight away and stop syncing.
- When you close your account, we delete your data within 30 days, except billing records we must keep for tax and accounting law, usually for 7 years.
Security
Data is encrypted in transit (HTTPS) and at rest. Accounting access tokens are encrypted with a separate key. Passwords are hashed and sign-in attempts are rate-limited. Access to production systems is limited to people who need it.
Your rights
You can see, correct, export or delete your information, and ask us to stop using it, by writing to hello@steadychase.com. We’ll answer within 30 days. Depending on where you live you may have further rights:
- California residents (CCPA/CPRA): the right to know, delete and correct personal information, and not to be treated differently for using these rights. We don’t sell or share personal information for cross-context behavioral advertising.
- Australia (Privacy Act 1988): you can complain to us first and, if you’re not satisfied, to the Office of the Australian Information Commissioner (oaic.gov.au).
If you received a reminder from a business that uses SteadyChase, contact that business about your invoice. We’ll pass on any privacy request we receive to them.
Children
SteadyChase is a business tool and isn’t meant for anyone under 18.
Changes
If we change this policy in a way that matters, we’ll email account owners before the change applies.
Contact
SteadyChase, hello@steadychase.com. See also our Terms of Service.