In short
- We collect what is needed to run your account: your details, the records you add and basic technical data.
- Your client and payment records are yours. We do not sell them or use them for advertising, and we never contact your clients.
- If you sign in with Google, we receive only your name, email address, profile picture and Google account identifier, and use them only to create and open your account.
- Card details go straight to our billing provider. We never see or store card numbers.
- You can export or delete your data at any time from Settings › Data & Privacy.
This summary is here to help. The full text below is what applies.
1.Who we are and what this policy covers
Whatisdue is a payment-tracking tool for freelancers and independent professionals. It helps you record what clients have paid, what they still owe and what is due next. In this policy, “Whatisdue”, “we” and “us” mean the operator of the Whatisdue service.
This policy explains what information we collect when you visit whatisdue.com or use the Whatisdue app, how we use it, who we share it with and the choices you have.
Whatisdue keeps records of payments. It does not collect, hold or move money, and it is not a bank or a payment processor.
2.Information we collect
Information you give us
- Account details: your name, email address and password (stored only in hashed form), and, if you add them, your phone or WhatsApp number, country, time zone and profile photo.
- Workspace details: your business name, role, website, business contact details and preferences such as currency, date format and reminder timing.
- Records you add: clients (names, contact details and addresses), projects, contracts, payment schedules, payments received, fees, notes and tags.
- Documents you upload: contracts and other files you attach to clients, projects, contracts or payments.
- Messages: what you send us through support chat or email.
- Newsletter: your first name and email address when you choose to receive product emails. If you joined our waitlist before the app opened, we still hold the first name and email address you gave us then.
Information from other services
- Google, if you choose to sign in with Google. See Signing in with Google.
- Whop, our billing provider: your membership status, plan, renewal date, payment amounts and receipts. We do not receive full card numbers.
Information collected automatically
- Sign-in and security data: your sessions, sign-in times, browser and device type, and the IP address recorded in server logs.
- Activity in your workspace: a history of changes to your records (shown to you as the activity log) and request counts used to protect the service from abuse.
- Website visits: pages viewed on whatisdue.com. See Cookies and similar technologies.
3.Signing in with Google
If you choose “Login with Google”, Google shares the following with us: your name, your email address, your profile picture and an identifier for your Google account.
We use this information only to create your Whatisdue account, sign you in and treat your email address as confirmed.
- We do not ask for, and cannot see, your Gmail, contacts, calendar, Drive files or any other Google data.
- We cannot post, send or do anything on your behalf in your Google account.
- We do not sell this information, share it for advertising or use it for anything other than providing your Whatisdue account.
- It is kept with your account and deleted with it when your account is deleted.
You can remove Whatisdue’s access at any time in your Google Account, under Security › Your connections to third-party apps and services. Your Whatisdue account stays in place; to sign in without Google, use “Forgot password” on the sign-in page to set a password.
Whatisdue’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4.How we use information
- To provide the service: store your records, work out balances and totals, and show them in your dashboard and reports.
- To send service emails: email confirmation links, sign-in codes, the payment reminders and notices you have switched on, and billing notices.
- To keep accounts secure: two-factor authentication, detecting misuse, limiting excessive requests and preventing fraud.
- To manage your plan: your free trial, membership and receipts.
- To help you: answer support requests and fix problems.
- To improve Whatisdue: understand in aggregate how the product is used.
- To send product news and tips, only if you have chosen to receive them. You can unsubscribe at any time.
- To meet legal obligations and enforce our Terms & Conditions.
We do not sell personal information. We do not use your records to advertise to you or to your clients.
Where data protection law requires a legal basis, we rely on the contract with you (to provide the service), our legitimate interests (to keep the service secure and improve it), your consent (for product emails) and our legal obligations.
5.Information about your clients
You decide which client details to keep in Whatisdue. You are responsible for having the right to store that information, and we process it only on your behalf, to provide the service to you.
We do not contact your clients, send them anything or use their details for our own purposes. If one of your clients asks us about their information, we will refer them to you.
8.How long we keep information
- Your account and records are kept for as long as your account exists.
- If your free trial or membership ends, your records stay available to view and export. Uploaded documents are deleted 90 days after your access ended unless you choose a plan, and we email you before that happens.
- If you delete your account, it is closed and signed out everywhere straight away, and any active membership is cancelled. We keep the account for 30 days in case you change your mind: sign in within those 30 days and the deletion is cancelled. After 30 days we permanently delete your profile, records and documents. If you have confirmed your email address, we email you the date. Copies in backups and logs are removed on their normal schedule.
- Billing records may be kept by us or by Whop for as long as tax and accounting laws require.
- Newsletter and earlier waitlist details are kept until you unsubscribe or ask us to remove them.
9.How we protect information
- Connections to Whatisdue are encrypted in transit.
- Each account’s records are kept separate, so only that account can read or change them.
- Passwords are stored only in hashed form.
- You can add two-factor authentication with an authenticator app or emailed codes.
- Uploaded documents are kept in private storage and opened through short-lived links.
No system is completely secure. If you believe someone has accessed your account without permission, change your password and contact us straight away.
10.Your choices and rights
- See and export your data: Settings › Data & Privacy lets you export your account data and payment records, and download your documents.
- Correct it: edit your profile, workspace and records at any time.
- Delete it: Settings › Data & Privacy › Delete account closes your account. Its data is permanently deleted 30 days later, unless you sign in again before then.
- Choose your emails: Settings › Notifications controls reminders and notices; product emails can be switched off in Settings › Data & Privacy or with the unsubscribe link in any of them.
- Disconnect Google: see Signing in with Google.
Depending on where you live, you may also have the right to object to or restrict certain uses of your information, to receive it in a portable format, and to complain to your data protection authority. To use any of these rights, contact us and we will respond within 30 days.
11.Where information is processed
The providers listed above operate in several countries, so your information may be processed outside the country where you live. We use providers that commit to protecting personal information to the standard the applicable law requires.
12.Children
Whatisdue is a business tool for adults. It is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
13.Changes to this policy
We may update this policy as Whatisdue changes. The date at the top shows when it was last updated. If a change significantly affects how we use your information, we will tell you by email or in the app before it takes effect.
14.Contact us
For questions about this policy or about your information, email us at contact@whatisdue.com. If you have a Whatisdue account, you can also message us from Help & Support in the app.