PingDue

Privacy Policy

Last updated: 10 November 2026

PingDue is operated by an individual sole proprietor based in Kolkata, West Bengal, India ("PingDue", "we", "us"). This policy explains what personal data we handle on pingdue.app (the website) and app.pingdue.app (the app), why, and your rights. PingDue is a tool for freelancers and small businesses aged 18 and over.

What we collectWhyWho helps usHow longYour rightsContact

1. Two kinds of data, two roles

1. Data about you, our customer (your account): we decide how it is used, so we are the controller.
2. Data about your clients that you enter into PingDue (their names, email addresses, invoices): we only use it to send reminders on your instructions, so we are your processor, and you are the controller. Our Data Processing Agreement covers this.

2. What we collect

Website visitors and waitlist

1. Your email address and, if you choose, your clients' main language, when you join the waitlist.
2. Technical data such as IP address and browser type, processed by Cloudflare to deliver and protect the website.

App users

1. Account data: email address, password (stored only as a secure one-way hash, never in readable form), the sender name you choose, and account settings.
2. Client and invoice data you enter: client names, email addresses, preferred language and time zone; invoice numbers, amounts, currencies, due dates and payment links.
3. Reminder records: which reminders were sent, when, and whether delivery succeeded.
4. Subscription data: your plan status and renewal dates. Lemon Squeezy handles your card and billing details. We never see or store your full card number.
5. Security data: failed log-in attempts (kept for 15 minutes) and a session cookie that keeps you logged in.

Cookies: the website uses no tracking or advertising cookies. The app uses one essential cookie to keep you logged in. It is required for the app to work, so no consent banner is needed for it.

3. Why we use it, and on what legal basis

Purpose	Legal basis (GDPR/UK GDPR)
Providing the app: your account, storing your clients and invoices, sending reminders	Performance of our contract with you
Account emails: confirming your email, password resets, important service notices	Performance of contract
Keeping PingDue secure and preventing misuse (log-in limits, sending limits)	Legitimate interests
Waitlist updates and launch news	Your consent, which you can withdraw at any time
Keeping billing and tax records	Legal obligation

We do not sell your personal data, share it for cross-context advertising, or use it to train AI models. We do not make automated decisions with legal effects about you.

4. Who helps us (sub-processors)

Provider	What they do for PingDue	Location
Cloudflare, Inc.	Hosts the website and app, stores the app's database, protects against attacks	United States and global network
Resend (Plus Five Five, Inc.)	Sends reminder emails and account emails (confirmation, password reset)	United States
Lemon Squeezy (a Stripe company)	Reseller and merchant of record: checkout, payments, invoices, sales tax/VAT	United States
Web3Forms	Receives waitlist sign-ups from the website form	Global
Google LLC (Gmail)	Our support inbox	United States and global

Some of these providers process data outside your country, including in the United States. Where the law requires it, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses offered by these providers. We will update this list before adding a new provider that handles your clients' data.

5. How long we keep data

1. Account, client and invoice data: for as long as your account exists. When you delete your account (Settings → Delete your account), it is removed from the live database immediately. Backup copies kept by our hosting provider are overwritten within 30 days.
2. Reminder records: for as long as the related invoice exists.
3. Waitlist emails: until launch and for as long as you stay subscribed to updates.
4. Billing and tax records: for as long as tax law requires (in India, generally up to 8 years). These are held mainly by Lemon Squeezy.

6. Your rights

Depending on where you live, you may have the right to:

1. Access the personal data we hold about you and get a copy. In the app, Settings → Download CSV gives you your invoices and clients at any time.
2. Correct inaccurate data.
3. Delete your data. You can delete your account yourself in Settings, or ask us.
4. Object to or restrict certain processing, and withdraw consent.
5. Data portability (receive your data in a machine-readable format).
6. For California residents (CCPA/CPRA): know what we collect, delete it, correct it, and not be discriminated against for using these rights. We do not sell or share personal information.
7. For users in India (DPDP Act, 2023): access, correction, erasure, grievance redressal and nominating another person to exercise your rights.
8. Complain to your local data protection authority.

If you are a freelancer's client and received a reminder through PingDue, the freelancer who sent it controls your data. Please contact them first. We will help them respond, and you can also write to us.

We reply to requests within 30 days.

7. Security

We use encrypted connections (HTTPS) everywhere, store passwords only as salted hashes, keep each customer's data separate, limit log-in attempts, and give access only to what is needed to run the service. No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authorities as the law requires.

8. Age

PingDue is only for adults (18 and over) using it for business. We do not knowingly collect data from anyone under 18.

9. Changes

We will update the date at the top when this policy changes, and email app users about important changes before they take effect.

10. Contact and grievance officer

For privacy questions, requests or complaints (including as our grievance contact under India's DPDP Act): support@pingdue.app