Privacy Policy

1. Information We Collect

PaidKit collects information you provide directly when creating an account, onboarding your business, or generating invoices. This includes your business name, contact email address, owner name, contractor license number, state registration details, trade specialization, billing preferences, and job site information.

2. Work Order Image Processing

When you upload a photo of a work order, the image is transmitted securely to our AI extraction service to extract invoice line items, amounts, and site details. Work order images are processed in temporary runtime memory and are not stored permanently on our file servers or databases.

3. How We Use Your Information

We use the collected information to deliver our core services, including building numbered invoices, transmitting automated payment reminders, calculating statutory lien notice deadlines, managing pilot access, and providing customer support.

4. Third Party Data Sharing

We share data with trusted third party service providers only to the extent necessary to operate the platform:

• Google Firebase for secure authentication and cloud database hosting.
• Google Gemini API for AI work order detail extraction and email copy formatting.
• Resend API for transmitting invoice PDFs and automated payment reminder emails to billing contacts.

5. Cookies and Authentication

PaidKit uses encrypted httpOnly cookies to maintain authenticated server sessions and temporary cookies for cross site request forgery protection. We do not use third party advertising cookies, tracking pixels, or cross site marketing scripts.

6. Data Storage and Security

Your account details, customer records, jobs, invoices, and statutory deadlines are stored securely in Google Firestore databases with strict tenant isolation rules. All data is encrypted in transit and at rest.

7. Client Storage

Authentication tokens are stored in secure httpOnly cookies rather than browser local storage. We use temporary session storage solely to remember user interface preferences, such as banner dismissal states during an active session.

8. Third Party Recipient Data

Information about general contractors and property owners entered into PaidKit is used strictly to address invoices, calculate notice deadlines, and deliver automated payment reminders on your behalf. We do not sell or market to third party contacts.

9. Data Retention

We retain your business profile, customer lists, invoices, and statutory deadline records for as long as your account remains active to provide ongoing payment tracking and historical records.

10. Data Deletion Rights

You have the right to request access to or deletion of your account and business data at any time. To request complete removal of your profile and records, please contact support.

11. Logging Policy

Server execution logs record operational system events and error states for security and diagnostic purposes. Operational logs do not record uploaded work order image files or payment credentials.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect service updates or statutory rule expansions. Any changes will be posted on this page with an updated revision date.

13. Contact Us

If you have any questions or concerns regarding this Privacy Policy or how your data is handled, please contact us by email at support@paidkitapp.com.