Legal

Privacy Policy

How Receivaro collects, uses, stores, and protects account, invoice, customer, and payment-related data.

Last updated

12 March 2026

Applies to

All Receivaro accounts

Who we are

Receivaro is operated as an independent software product. If you have questions about your data, contact us at privacy@receivaro.com.

What data we collect

When you use Receivaro, we collect and store:

  • Account data: Your email address, name, and company name provided during sign-up.
  • Invoice data: Invoice numbers, amounts, due dates, and descriptions that you add to the platform.
  • Customer data: The names, email addresses, and phone numbers of the customers you invoice — entered by you.
  • Payment metadata: Stripe checkout session IDs and payment confirmation records. We do not store card numbers or bank details.
  • Reminder logs: Records of which emails were sent, when, and to whom — so you can see your collections history.

Why we collect it (lawful basis)

We process this data under the lawful basis of legitimate interest (Article 6(1)(f) UK GDPR). Receivaro is a B2B invoice collection service. The data we process is commercially necessary for the service you have contracted with us to provide. Specifically:

  • Sending automated payment reminders to your customers on your behalf.
  • Tracking payment status and updating invoice records when payment is received.
  • Providing you with a collections dashboard and audit trail.

How long we keep your data and who we share it with

  • Active account: Data is retained for as long as your account is active.
  • Deleted account: We delete all personal data within 30 days of account closure.
  • Payment records: Stripe payment records may be retained longer for financial compliance purposes, in accordance with Stripe's own retention policy.

We do not sell your data. We use the following third-party services to operate Receivaro:

  • Resend — email delivery service used to send reminder emails to your customers.
  • Stripe — payment processing and Stripe Connect for collecting payments on your behalf.
  • Render — cloud hosting provider where the application and database run (Frankfurt, EU).

All data is stored in the EU (Frankfurt region) and not transferred outside the UK/EU.

Your data rights

Under UK GDPR, you have the right to:

  • Access the data we hold about you.
  • Correct inaccurate data.
  • Delete your account and associated data (right to erasure).
  • Object to our processing.
  • Portability — receive a copy of your data in a portable format.

To exercise any of these rights, email us at privacy@receivaro.com. We will respond within 30 days.

Cookies

Receivaro uses session cookies only, to keep you signed in. We do not use tracking cookies or third-party analytics scripts.

Your customers' data

When you add customer email addresses and send reminders through Receivaro, you are the data controller for your customers' data. Receivaro acts as a data processor on your behalf. You are responsible for ensuring you have a lawful basis to contact your customers (for invoice collection, this is typically legitimate interest or contractual necessity).

Every reminder email we send on your behalf includes contact information for your business and a way for your customers to raise queries about the invoice directly with you.

Changes to this policy

If we make material changes to this policy, we will notify you by email and update the “Last updated” date above. Continued use of the service after notification constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email privacy@receivaro.com.