Privacy Policy

This Privacy Policy explains how PE Basev Maksim Igorevich("we", "us") handles personal data when you use NeatDue at neatdue.com (the "Service"). NeatDueis a web application for creating and storing invoices: you enter your own details and your clients' details, add line items, optionally upload a logo, and download finished invoices as PDF files.

1. Data we collect

• Account data. Your email address and the sign-in provider you use (Google or email/password). Authentication is provided by Google Firebase Authentication — we do not store your password; it is managed by Firebase.
• Content you create. Your sender profile, client records, and invoices are stored in our database (MongoDB Atlas). Uploaded logos are stored in Cloudflare R2. Note that client records and invoices may contain personal data of third parties (your clients) — you are responsible for having a lawful basis to enter it.
• Payment data. Purchases are processed by Paddle, acting as Merchant of Record (the seller of record). Paddle handles billing, payment methods, and tax. We never receive or store your card details; we only learn your subscription status.
• Technical data. We use Plausible, a self-hosted, cookieless, privacy-friendly analytics tool, to count page views in aggregate. It does not track you across sites and sets no advertising cookies.

2. Cookies

Our cookie use is minimal. We set a single session cookie that keeps you signed in; it is strictly necessary for the Service to work and is deleted when you log out or when it expires. We set no analytics or advertising cookies, so we don't show a cookie banner.

3. How we use data

• To provide the Service: authentication, storing and rendering your invoices and PDFs.
• To operate your subscription (via Paddle) and enforce plan limits.
• To respond to support requests sent to support@neatdue.com.
• To understand aggregate usage of the product (Plausible).

We do not sell personal data and we do not use it for advertising.

4. Subprocessors

We rely on the following service providers to run NeatDue:

• Google Firebase — Authentication (Google sign-in and email/password).
• MongoDB Atlas — Database (your account and content).
• Cloudflare R2 — File storage (uploaded logos).
• Paddle — Payments — Merchant of Record for all purchases.
• Vercel — Application hosting.
• Plausible (self-hosted) — Privacy-friendly, cookieless analytics.

5. Data retention and deletion

We keep your data for as long as your account is active. If you delete your account, we delete your account data and content — including your sender profile, clients, invoices, and uploaded logo — within a reasonable period, except for data we are legally required to keep and records held by Paddle for tax and financial reporting purposes, which follow Paddle's own retention rules.

6. Your rights (GDPR / CCPA)

Depending on where you live (including the EU/EEA, UK, and California), you may have the right to:

• access the personal data we hold about you;
• receive an export of your data in a portable format;
• correct or delete your data, or delete your entire account;
• object to or restrict certain processing.

To exercise any of these rights, email support@neatdue.com. We will respond within the timeframes required by applicable law. When your account is deleted, your invoices and client records are permanently removed from our systems and cannot be recovered.

7. Security

Data is transmitted over HTTPS and stored with reputable providers listed above. No system is perfectly secure, so please use a strong, unique password (or Google sign-in) for your account.

8. Changes to this policy

We may update this policy as the Service evolves. The "Last updated" date above always reflects the current version; material changes will be communicated in the app or by email.

9. Contact

PE Basev Maksim Igorevich. Email: support@neatdue.com.