What we collect
Three kinds of information, and that’s it
When you sign up for DueFollow you give us your name and email so we can keep your account open and so we can write back to you about your subscription. You also pick a password — we only store a one-way hash of it, never the word itself.
When you use the app you store details about your own customers: their names, email addresses, invoice numbers, amounts, due dates, and the payment links you want them to follow. We hold those exactly as you typed them so we can draft and send the reminders.
When your customers reply to a reminder (or click unsubscribe, or mark something as paid) we capture that interaction so the inbox view in your dashboard reflects reality. We do not pull in data from any other service.
How we use it
Sending the reminders you wrote — that’s the whole job
DueFollow exists to draft and send polite, persistent follow-ups to the people who owe you money. Every reminder goes through Polsia’s transactional email proxy, which we use in place of a third-party mail vendor — it does the sending, the bounce handling, and the unsubscribe link, so we don’t keep a parallel mail server.
We also use your account email to send you product updates, billing receipts, security alerts, and the weekly digest you can switch on or off in Settings. We never sell, rent, or share your email or your customers’ emails with anyone for marketing — the list is yours, not inventory.
What we store, and where
A managed Postgres, kept boring on purpose
Your account, your invoices, your saved templates, and your privacy preferences live in a managed Postgres database operated as part of the platform that hosts the app. Encryption in transit (TLS) is on by default; backups are managed by the platform and not something we export or copy.
We keep invoice + template rows until you delete them or close your account. Drafts of reminders sit in a queue until they are sent, paused, or cancelled. We do not retain sent-email content beyond what your inbox or ours keeps for delivery records.
Who else sees it
The platform, the email proxy, and that’s it
Three parties can come into contact with your data, and we list them so you can sanity-check the chain:
Polsia, the platform operator, hosts the database and runs the app code. They do not read your account content for any purpose other than operating the service and responding to support requests you send.
DueFollow’s own team, only when you email us a support question that requires looking at your data to answer it.
The transactional email proxy sends the reminder emails and stores delivery state (sent, bounced, opened-unsubscribe) so the inbox view works. That provider sees what is in each email at send time, but is not allowed to use it for anything else.
We do not share data with advertising networks, analytics resellers, data brokers, social platforms, or anyone else. We currently do not run third-party analytics on the app at all — if we add it later we will update this page first.
Your choices & your data
Toggles, exports, and a real human to ask
The Privacy tab inside Settings has a switch for every kind of email we might send you: product updates, the small-business newsletter, and the Monday-morning reminder digest. Toggling them is immediate — no waiting for a list to refresh.
On the same tab there is a "Download my data" button. One click packages your profile, your invoices, your saved templates, and your privacy preferences into a single JSON file you can save and inspect.
If you want your account and all its data deleted, email us and we will do it within 30 days. We do not offer a "delete account" button yet because it is irreversible and we want a human in the loop for the first cut — once we are confident in the flow we will add a button here.
When we update this policy
Change-log style, not fine print
If we make a material change — a new category of data, a new third party, a new analytics tool — we will note the change at the bottom of this page, send a one-line email to every account, and give you 30 days before it takes effect. Small wording fixes and clarifications get a quiet date stamp.
Small print
Who the data controller is
DueFollow is operated on the Polsia platform. The data controller for the information described above is DueFollow; questions about lawful basis, retention windows, or your rights under GDPR / CCPA can be sent to the address below and we will answer in plain language.
Contact us
A real inbox, not a form
Questions, deletion requests, or a "hey, you forgot to mention X" — write to us at duefollow@polsia.app. A human will reply.