Privacy Policy

Effective date: July 1, 2026. Operated by 9th Level Software ("we", "us").

1. Who we are

NudgePay is an accounts-receivable collections tool that connects to your QuickBooks Online account to surface overdue invoices and help your team follow up. Questions: support@nudgepay-ar.app.

2. Data we access from QuickBooks Online

With your authorization we read invoices, customers, balances, and due dates. We use this data solely to display overdue invoices and manage collections on your behalf. We do not access QuickBooks data beyond what these features require.

3. QuickBooks authorization tokens

OAuth access and refresh tokens are encrypted at rest using AES-256 and are never exposed to your browser. When you disconnect QuickBooks, we revoke the tokens with Intuit and delete them from our systems.

4. Messaging data (SMS)

When you text a customer, we process the destination phone number, the message body, and Twilio delivery status. We send SMS only to customers with recorded consent, honor STOP/HELP opt-out keywords, and operate in compliance with TCPA and A2P 10DLC requirements.

5. Account data

We store your user email and team membership to authenticate you and control access to your organization's data.

6. Storage and security

All data is encrypted in transit and at rest. Row-level security isolates each organization's data so members of one organization cannot access another's.

4b. Messaging data (email)

When you email a customer, we process the destination address, subject, body, and delivery events through Resend. Inbound replies to a configured receiving mailbox are recorded in your workspace. We honor unsubscribe requests (CAN-SPAM / RFC 8058 one-click) and do not send collection email after a customer opts out.

7. Sub-processors

We rely on Intuit (QuickBooks Online), Twilio (SMS delivery), Resend (transactional email send and inbound receiving), Supabase (database and authentication), and Cloudflare (application hosting). Render may host a secondary Node runtime for staging.

8. Data retention and deletion

Disconnecting QuickBooks revokes and deletes stored tokens. To request deletion of your other stored data, contact support@nudgepay-ar.app.

9. No sale of data

We do not sell your data or share it for advertising.

10. Governing law

This policy is governed by the laws of Florida.