Privacy Policy
Last updated 28 September 2026
Duely is operated by PSAU Tech Data Software Pvt Ltd (“we”, “us”). This policy explains what data Duely collects, why, who helps us process it, and the choices you have.
1.What we collect
- Account details: your name, email address and password (or your Google sign-in), your organisation's name, logo and timezone, and the team members you invite.
- Accounting data: the invoices, payments, credit notes and contacts we import from Xero or QuickBooks Online, and anything you add in Duely, such as clients, contacts, payment promises, partial payments, notes, groups, reminder rules and late fee policies.
- Email content: the reminders, statements and late fee notices Duely drafts and sends, and whether they were delivered or bounced.
- Billing details: your plan and subscription status. Card details are handled by our payment provider and never reach our servers.
- Usage and device data: logs of how the app is used, and, on our public website, analytics about visits.
2.How we use it
We use your data only to run Duely for you: to sign you in, sync with your accounting software, work out who needs a follow-up, send the emails you've approved or set to send automatically, show your clients their balance in the client portal, send you the weekly digest, handle billing and support, and keep the service secure and working.
We don't sell your data, and we don't use your clients' data for advertising.
3.Your clients' data
When you connect your accounting software, Duely processes information about your clients, such as names, email addresses and what they owe. We handle it on your behalf and only to provide the service. You're responsible for having a lawful basis to use it and to contact them.
Each client's portal link shows only that client's own balance and invoices.
4.Gmail
- If you connect Gmail, Duely asks only for permission to send email (the gmail.send scope). It can't read, search or delete anything in your inbox.
- It uses that permission only to send reminders, statements and late fee notices to your clients, when you approve them or have turned on automatic sending.
- Google tokens are kept in our database, which is encrypted at rest, and are never shared with anyone else.
- You can disconnect Gmail in Duely, or revoke access at myaccount.google.com/permissions. Disconnecting deletes the tokens.
- Duely's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
If Gmail isn't connected, Duely sends these emails through our email provider instead.
5.Xero and QuickBooks
- Duely reads invoices, payments, credit notes and contacts so it can show what each client owes and keep that up to date.
- Duely writes back to your accounting software in two cases only: payments you record in Duely, and late fee invoices created by your late fee policies.
- Tokens are kept in our database, which is encrypted at rest, and deleted when you disconnect.
- You can disconnect at any time from the integration settings in Duely, or from Xero or Intuit directly.
6.AI assistants
If you choose to connect an AI assistant (such as Claude) to Duely, the assistant can read a summary of your receivables, such as what's owed, what's overdue, recent and upcoming activity, through read-only access that you approve. It can't change anything in Duely. You can revoke that access at any time.
7.Who processes your data
We use a small number of providers to run Duely. Each one only gets what it needs to do its job:
- Supabase: database and sign-in
- Vercel: hosting
- Inngest: scheduled and background jobs
- Resend: sending email when Gmail isn't connected
- Dodo Payments: subscription billing
- Better Stack: application logs
- Google (Gmail), Xero and Intuit (QuickBooks): only when you connect them
On our public website we use Google Analytics, Microsoft Clarity and Vercel Analytics to understand visits, and Affonso to track referrals from our affiliates. These may set cookies.
8.Cookies
Duely uses cookies to keep you signed in and to remember your preferences, such as light or dark mode. The analytics and referral tools on our website use their own cookies. You can block or delete cookies in your browser, though you'll need them to stay signed in.
9.How long we keep it
We keep your data while your account is active. If you ask us to delete your account, we delete your data from our active systems within 30 days, except where we have to keep something longer for legal, tax or security reasons. Disconnecting an integration deletes its tokens straight away.
10.Security
Data is encrypted in transit and at rest, and access to your organisation's data is restricted to its members. No system is perfectly secure, but we work to protect your data and will tell you promptly if a breach affects it.
11.Data Protection Officer
We have a designated Data Protection Officer for privacy questions, requests and complaints. You can reach them at privacy@duely.in. We aim to reply within a few working days.
12.Your rights
You can see and update most of your data in the app. To ask for a copy of your data, a correction, or deletion of your account, email privacy@duely.in. Depending on where you are, you may have further rights under local law, including the Philippine Data Privacy Act of 2012, India’s Digital Personal Data Protection Act, 2023, and the GDPR.
13.Changes and contact
If we make significant changes to this policy, we'll tell you by email or in the app before they take effect.
Questions about privacy? Email privacy@duely.in.