Privacy Policy
Last updated 2 August 2026.
What we collect
We collect your account email, your organisation's details, and receivables metadata from Xero — amount bands, dates, and hashed invoice references. We never store plaintext invoice numbers, and we never see or store your bills payable.
How we use it
We use this data to compute aggregated, anonymised payment metrics, which are only shown once enough suppliers have contributed to protect anonymity, and to maintain registered defaults and audit logs of who has accessed which report.
What we never do
We never sell your personal information, never publish the identity of contributing suppliers, and never show opinions, reviews, or star ratings — only computed facts.
Retention and deletion
Disconnecting your Xero connection stops data collection immediately, and your raw ledger rows are deleted 90 days after you disconnect. Registered defaults display for at most 5 years from the debt's due date. Audit logs are retained for compliance purposes.
Your rights
Under the Privacy Act 2020, you have the right to access and correct your personal information — contact us to exercise these rights. Whether the Credit Reporting Privacy Code 2020 applies to our aggregated payment data is currently under legal review.
Contact
privacy@paidwell.example (placeholder address — to be replaced with a real contact before launch).