Privacy Policy

Last updated: August 20, 2026

This Privacy Policy explains how Paidbon ("we," "us," or "our") collects, uses, and protects information when you use our mobile application and website (the "App"). Paidbon is the data controller for the personal data described in this policy — meaning we determine how and why your data is processed.

Information We Collect

Account Information: When you sign in or create an account, we collect information such as your name, email address, and login credentials.

Receipt & Financial Information: Receipts you scan, upload, forward, or receive from merchants; and, if you connect a bank, transaction data (merchant, amount, date) retrieved through our bank aggregation partner.

Payment Information: Purchases and subscriptions are processed by Paddle (Paddle.com), our Merchant of Record. Paddle collects your payment details, billing address, and tax information directly; we receive only your subscription status and plan. We do not store your full card details on our own servers.

Usage & Device Information: Basic technical information such as device type, app version, IP address, in-app interactions, and search history, used to maintain, secure, and improve the App.

Support & Assistant Content: Messages you send to support or to our AI assistant (Zoaey), including optional voice input, and photos you upload for receipt scanning.

How We Use Your Information & Legal Bases

To create and manage your account and provide the App's features (performance of our contract with you);
To process your receipts, match transactions, and sync connected banks (performance of our contract);
To process payments and subscriptions via Paddle (performance of our contract; legal obligations such as tax and accounting are handled by Paddle as Merchant of Record);
To secure the App, prevent fraud, and maintain audit logs (our legitimate interests);
To improve the App and understand usage (our legitimate interests);
To send service messages about your account or transactions (performance of our contract);
To send marketing where permitted, which you can opt out of at any time (consent or legitimate interests, depending on your location).

Data Sharing

We do not sell your personal information. We share information only with the categories of recipients below, solely as necessary to provide the App:

Merchant of Record: Paddle (Paddle.com) — for the sale of our products, subscription management, payments, tax compliance, and invoicing;
Service providers / subprocessors: hosting, database, authentication, AI processing, analytics, and support tooling providers acting on our behalf;
Bank aggregation partner: Plaid, when you choose to connect a bank account;
Professional advisers (legal, accounting) where needed;
Authorities where required by law.

Where data is transferred outside your country or the UK/EEA, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

Data Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest and access controls, to protect your information from unauthorized access, alteration, or disclosure. No method of electronic storage or transmission is 100% secure.

Data Retention

We retain your account information for as long as your account is active or as needed to provide you services. When data is no longer needed, it is deleted or anonymised. You may request deletion of your account and associated data at any time via our account deletion page or by contacting us.

Your Rights

Depending on your location (including the UK/EEA under GDPR), you may have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority. We respond to requests within one month. You may update your account information at any time within the App.

Cookies

We use essential cookies required for the App to function (such as keeping you signed in). Where analytics or marketing cookies are used, you can manage your preferences in your browser settings.

Children's Privacy

Paidbon is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
support@paidbon.com