Privacy Policy

Overdue, Inc. ("Overdue," "we," "us," or "our") is committed to protecting the privacy of our users and the individuals whose information we process in connection with our invoice collection services. This Privacy Policy describes how we collect, use, disclose, and protect information through our website at overdue.inc, our application, and all related services (collectively, the "Service").

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address and authentication data when you sign up or log in via magic link.
• Invoice Data: When you CC invoice@overdue.inc on invoices, we receive the full email contents including invoice amounts, due dates, debtor names, debtor contact information (email addresses, phone numbers, mailing addresses), and any attachments.
• Communication Content: The content of emails exchanged between you, your debtors, and our Service, including replies to collection notices.
• Support Communications: Information you provide when contacting our support team at support@overdue.inc.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken within the Service, timestamps, and referring URLs.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Cookies and Similar Technologies: We use cookies, local storage, and similar technologies to maintain sessions, remember preferences, and analyze usage patterns.

1.3 Information From Third Parties

• Debtor Information: We may supplement debtor contact information from publicly available sources to improve collection effectiveness (e.g., additional phone numbers, email addresses, or business contacts).

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Service, including monitoring invoices and conducting collection activities on your behalf.
• Process and extract relevant details from CC'd invoice emails to initiate monitoring and, when necessary, collection efforts.
• Send collection communications to debtors via email, SMS, phone, social media, and legal channels as part of our escalation process.
• Use AI to draft collection messages, classify debtor replies, and optimize collection strategies.
• Authenticate your identity and secure your account through magic link authentication.
• Communicate with you about your account, collection status, and Service updates.
• Calculate and process performance-based fees upon successful collection.
• Analyze usage patterns to improve the Service and develop new features.
• Comply with legal obligations and enforce our Terms of Service.

3. AI Processing of Communications

Overdue uses artificial intelligence technologies to process communications related to invoice collection. Specifically:

• Message Drafting:AI is used to generate professional, contextually appropriate collection messages tailored to each debtor's situation and the age of the overdue invoice.
• Reply Classification: AI analyzes debtor responses to categorize them (e.g., payment promise, dispute, request for information) and determine appropriate next steps.
• Strategy Optimization: AI helps determine the optimal timing, channel, and tone for collection communications.

AI processing is conducted on our secure infrastructure. Human review is applied for quality assurance. You may request human review of any specific communication by contacting support@overdue.inc.

4. How We Share Information

We do not sell your personal information. We share information in the following circumstances:

• With Debtors: As part of the collection process, we share your business name and relevant invoice details with debtors in collection communications. This is essential to the Service and is authorized by your use of the Service.
• Service Providers: We use third-party service providers to operate the Service, including Resend for email delivery, telecommunications providers for SMS and phone calls, and cloud hosting providers. These providers process data on our behalf under contractual obligations to protect your information.
• Legal Compliance: We may disclose information when required by law, regulation, legal process, or governmental request.
• Legal Action: When collection escalates to legal action, relevant invoice and debtor information is shared with attorneys and courts as necessary to pursue collection.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
• With Your Consent: We may share information for other purposes with your explicit consent.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

• Account Data: Retained for the duration of your account and for 12 months following account closure.
• Invoice and Collection Data: Retained for 7 years after the final collection activity or payment, as required for financial record-keeping and legal compliance.
• Communication Records: Retained for 7 years for regulatory compliance and dispute resolution.
• Usage Data: Retained in anonymized or aggregated form for analytical purposes indefinitely; identifiable usage data is deleted after 24 months.

6. Security Measures

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest (AES-256).
• Access controls limiting data access to authorized personnel on a need-to-know basis.
• Regular security assessments and monitoring.
• Secure infrastructure hosted on industry-leading cloud platforms.
• Passwordless authentication (magic links) reducing credential theft risk.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request a machine-readable copy of your data.
• Objection: Object to certain processing of your information.
• Restriction: Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at support@overdue.inc. We will respond to your request within 30 days. Note that certain data may be exempt from deletion requests due to legal record-keeping requirements.

8. Cookie Policy

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for the Service to function, including authentication session tokens. These cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the Service so we can improve it. You may opt out of analytics cookies through your browser settings.

We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the Service.

9. Children's Privacy

The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information. If you believe we have collected information from a child, please contact us at support@overdue.inc.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purpose, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at support@overdue.inc. We will verify your identity before fulfilling your request. You may designate an authorized agent to make a request on your behalf.

11. International Data Transfers

Your information may be transferred to and processed in the United States and other jurisdictions where our service providers operate. By using the Service, you consent to the transfer of your information to jurisdictions that may have different data protection laws than your jurisdiction of residence.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the address associated with your account at least 30 days before they take effect. The "Effective date" at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Overdue, Inc.
Email: support@overdue.inc
Website: overdue.inc