Privacy Policy
Effective date: February 22, 2026 · Last updated: February 22, 2026
KoPay ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the KoPay platform and related services ("Service").
By using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Service.
1. Information We Collect
Information you provide directly:
- Account registration details (name, email address, business name)
- Business profile information (company address, logo, contact details, tax settings)
- Invoice and estimate content you create (line items, amounts, dates, notes)
- Customer records you enter (customer names, email addresses, business details)
- Communications you send to us (support requests, feedback)
Information collected automatically:
- Log data (IP address, browser type, pages visited, timestamps)
- Usage data (features used, actions taken within the platform)
- Device information (device type, operating system)
- Analytics data via Vercel Analytics (aggregated, non-identifiable traffic data)
Information we do not collect:
- We do not collect, store, or access your customers' payment card numbers, bank account details, or other sensitive financial data. All payment data is processed exclusively by Stripe.
2. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Providing and operating the Service | Account info, invoice/estimate data, customer records |
| Processing payments via Stripe | Invoice amounts, customer email (passed to Stripe for payment links) |
| Sending invoice and estimate emails | Customer email addresses, invoice content (via Resend) |
| Authenticating your account | Email, password hash (via Supabase Auth) |
| Improving the Service | Aggregated usage patterns, feature interaction data |
| Responding to support requests | Email address, message content |
| Legal compliance | As required by applicable law |
We do not sell your personal information to third parties. We do not use your data for advertising targeting or share it with advertising networks.
3. Third-Party Services We Use
The Service relies on the following third-party providers. Each has its own privacy practices:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Stripe, Inc. | Payment processing. Stripe handles all card data. KoPay does not store card numbers. | stripe.com/privacy |
| Supabase | Database, authentication, and file storage infrastructure. | supabase.com/privacy |
| Resend | Transactional email delivery (invoices, estimates, notifications). | resend.com/privacy |
| Vercel | Web hosting and edge delivery. May log request metadata. | vercel.com/legal/privacy-policy |
4. Your Customers' Data
When you use KoPay to create invoices and customer records, you are the data controller for your customers' information. You are responsible for obtaining any necessary consent from your customers to process their data and for complying with applicable privacy laws (including CCPA, if applicable) with respect to your customers.
KoPay processes your customers' data only as a data processor acting on your behalf, solely for the purpose of providing the Service to you. We do not use your customers' information for our own purposes.
5. Data Retention
We retain your account data and User Content for as long as your account is active. During the beta period, we may not guarantee long-term data retention. If you close your account, we will delete or anonymize your data within a reasonable period, except where retention is required by law.
6. Data Security
We implement reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS) and at rest, and access controls limiting who can access your data. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have rights regarding your personal data, including the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Object to or restrict certain processing
- Portability of your data in a common format
To exercise these rights, contact us at hello@usekopay.app. We will respond within a reasonable timeframe.
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act. We do not sell personal information. You have the right to know what personal information we collect, to request deletion, and to opt out of any sale (which we do not engage in). To exercise your California privacy rights, contact us at hello@usekopay.app.
9. Children's Privacy
The Service is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under 13, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice within the Service at least 14 days before changes take effect. Continued use of the Service after the effective date constitutes your acceptance of the updated Policy.
11. Contact
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:
KoPay
Email: hello@usekopay.app
This Privacy Policy was last updated February 22, 2026.