Privacy Policy

Last updated: October 11, 2026

DueBuzz is a software service operated by EmpireX Global LLC ("DueBuzz," "we," "us," or "our"). This Privacy Policy explains how information is collected, used, and handled when you use DueBuzz at https://duebuzz.com.

1. Information We Collect

Depending on how you use DueBuzz, we may process information such as:

• Account information, including your name and email address.
• Business or company information that you provide.
• Invoice-related information that you enter into the service.
• Customer or contact information that you provide in connection with invoices and payment follow-up.
• Information such as invoice amounts, due dates, payment status, and related notes or records.
• Records of reminders sent on your behalf, including delivery outcomes reported by mail servers, such as whether a message was delivered, rejected, or reported as spam.
• Subscription and billing-related information associated with your account.
• If you connect your own Stripe account for automatic payment detection (or, on accounts that connected one, your own PayPal integration), the webhook credential you provide, and the payment event data those providers send us. That event data can include a payment amount, a currency, a provider reference and, for some event types, the payer's email address. We use it only to decide whether one of your open invoices has been paid, and to tell you about a payment we could not match to one.
• Technical and usage information reasonably necessary to operate, secure, troubleshoot, and improve the service.

Please do not provide information through DueBuzz that you are not authorized to use or process.

2. How We Use Information

We may use information to:

• Create, authenticate, and maintain user accounts.
• Provide and operate DueBuzz features.
• Help users manage invoices and payment follow-up.
• Send account, authentication, security, and service-related communications.
• Provide customer support.
• Administer subscriptions and billing.
• Protect the service against abuse, fraud, unauthorized access, and security threats.
• Diagnose technical problems and improve the reliability and functionality of DueBuzz.
• Comply with applicable legal obligations.

3. Information You Provide About Other People

DueBuzz allows you to enter information relating to your own customers, clients, or other contacts.

You are responsible for ensuring that you have the necessary rights and lawful basis to provide and use that information through DueBuzz.

We process such information to provide the service to you and do not obtain ownership of your business records merely because they are processed through DueBuzz.

4. Service Providers

We rely on third-party service providers to operate DueBuzz, including providers for hosting, authentication, databases, transactional email, payment processing, infrastructure, security, and related technical services. These currently include:

• Vercel: hosting, infrastructure, and privacy-friendly website analytics (page views, referring site, country, device and browser type; no cookies and no cross-site tracking).
• Supabase: authentication, databases, and account emails.
• Resend: transactional email delivery.
• Sentry: error reports, so we learn when something breaks. Configured not to collect personal data by default.
• Stripe: payment processing for DueBuzz subscriptions.

Payment detection is a separate and optional arrangement, and it is worth stating plainly because it involves a second use of the same provider names. If you switch it on, you register DueBuzz as a webhook endpoint inside your own Stripe account (or, on accounts that connected one, your own PayPal integration), and that account sends us payment notifications directly. PayPal reports only payments taken through a business's own PayPal integration, so payments to PayPal invoices, PayPal payment links and PayPal.me are never detected; you mark those paid yourself. We never hold an API key for your payment account, cannot see your balance, cannot move funds, and cannot read anything your provider does not send to that endpoint. You can remove the endpoint at your provider, or disconnect it in DueBuzz, at any time.

These providers may process information as necessary to perform services on our behalf and are subject to their own contractual and legal obligations.

When you purchase a paid subscription, payment information may be collected and processed directly by our payment processor, Stripe. Please do not send full payment card numbers or other sensitive payment credentials through support email or other non-payment fields.

5. International Transfers

Our service providers may process information in countries other than the one you are in, including the United States. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for information transferred internationally.

6. Transactional Emails

We send transactional messages relating to your account, including email confirmation, password reset, security, billing, invoice reminder emails sent on your behalf at your direction, and important service notifications.

These communications are necessary for operating your account and are different from optional marketing communications.

7. Cookies and Similar Technologies

DueBuzz uses only the cookies needed to run the service: sign-in session cookies set by our authentication provider, which keep you signed in and secure your account, and a preference cookie that stores your timezone so that dates are shown in your local time. Your choice of light or dark display is stored in your browser's local storage and is not sent to us.

We do not use advertising or tracking cookies. Our website analytics is cookieless and does not identify you: it counts page views without storing anything on your device, and addresses that carry private links or payment details are stripped of those details before they are counted.

If we change the cookies we use, we will update this section.

8. Data Retention

We retain information for as long as reasonably necessary to provide the service, maintain legitimate business and security records, comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods may vary depending on the type of information and the reason it is processed. In practice:

• Your account (name, business name, email, settings): kept while your account is open.
• Open invoices and the reminders sent about them: kept while the invoice is open, however long that is.
• Paid and canceled invoices, with the reminders and thank-you notes sent about them: kept for 24 months after the invoice was marked paid or canceled, so you have a history of how each client pays, then deleted automatically. Reopening an invoice stops that clock. You can delete any invoice sooner from your dashboard.
• Payment references: when a payment detected from your Stripe account or a connected PayPal integration settles an invoice, we keep that payment's reference number and the date, even after the invoice itself is deleted. It holds no client name or email. It exists so the same payment can never settle a second invoice, and so you are still told if that payment is later refunded or disputed. It is kept until your account is deleted.
• Daily summary records (the date each daily summary was sent to you, and how many invoices it listed): kept while your account is open.
• Trial notice records (the date, the kind of notice, and how many reminders it listed): kept while your account is open.
• Payment detection credential (the webhook signing secret or ID you paste in): kept until you disconnect it or delete your account.
• Your export. The Billing page lets you download every invoice and every message sent on your behalf as CSV files at any time, including after a trial ends. Keep a copy of anything you need for longer than the periods above.
• Deleting your account from the Billing page removes all of the above from our database immediately and permanently, payment references included. Copies may remain in our database provider's encrypted backups until those backups expire.
• Records our payment processor keeps for its own tax and legal obligations are outside our control and are retained by them under their own policy.

9. Data Security

We use reasonable administrative and technical measures intended to protect information handled through DueBuzz.

However, no internet-based service or method of electronic storage can guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us if you believe your account has been compromised.

10. Your Rights and Choices

Depending on your location and applicable law, you may have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• have information deleted;
• restrict or object to certain processing;
• receive information you provided in a portable format;
• withdraw consent, where processing is based on consent, without affecting processing already carried out.

Most account information can be changed directly in the dashboard. You can download your invoices and reminder history as CSV files from the Billing page, and delete your account and everything associated with it at any time from the same page; that deletion is immediate and cannot be undone.

For anything else, contact us at support@duebuzz.com. We aim to respond within 30 days. We may need to verify your identity first, and we may be unable to action a request where the law requires us to keep the information.

11. Children's Privacy

DueBuzz is a business-oriented service and is not intended for children.

12. Legal Disclosures

We may disclose information when reasonably necessary to comply with applicable law, legal process, enforceable governmental requests, protect our rights or users, investigate fraud or security issues, or protect the integrity of the service.

13. Changes to This Privacy Policy

We may update this Privacy Policy as DueBuzz evolves or as legal and operational requirements change.

When we make material updates, we may provide notice through the service or by other reasonable means.

14. Contact

For privacy questions or requests, contact: