Privacy Policy

This Privacy Policy applies to the Duevaro website and application operated by [Your Company Name] ("Duevaro", "we", "us"), available at [https://yourdomain.com]. By using Duevaro you agree to the practices described here.

If you have questions at any point, email us at [support@yourdomain.com].

• Account information — your name, email address, password (stored in hashed form by our authentication provider), and login method such as email or Google sign-in.
• Business profile information — business name, contact details, logo, currency, and reminder preferences you choose to add.
• Client and invoice information you enter — client names, email addresses, invoice numbers, amounts, due dates, payment status, notes, and reminder messages. You control this content and are responsible for having a lawful basis to store it.
• Connected email account information — if you connect Gmail/Google Workspace or Outlook/Microsoft 365, we store the connected mailbox address, display name, connection status, and secure access credentials needed to send reminders on your behalf.
• Payment and billing information — handled by Stripe. We receive a customer reference, plan, subscription status, billing period, and invoice history. We never receive or store full card numbers.
• Usage and technical data — log data such as IP address, browser type, device type, pages visited, and error reports, used to keep the service secure and working.

• To provide the Duevaro service — accounts, dashboards, client records, invoice tracking, and reminder scheduling.
• To send invoice reminders from your connected Gmail or Outlook account, at the times and with the content you configure.
• To manage subscriptions, free trials, renewals, and billing through Stripe.
• To improve the product — understanding which features are used and fixing problems.
• To provide support and send essential service messages such as account, security, and billing notices.

We do not sell your personal information, and we do not use your invoice or client data to train advertising profiles.

• You can connect a Gmail/Google Workspace or Outlook/Microsoft 365 mailbox so reminders come from your own address.
• Duevaro uses that access only to send invoice reminder emails on your behalf. Reminders are composed from the invoice and client details you enter.
• Replies from your clients go straight back to your connected mailbox — we do not intercept them.
• Duevaro does not read your inbox content. If a future feature ever needs additional access, we will ask for your explicit consent first and explain what it does.
• You can disconnect an email account at any time in Settings → Email accounts. Disconnecting revokes our ability to send from that mailbox.

Duevaro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request the narrowest Gmail scope needed to send messages on your behalf, and we do not use Google user data for advertising or sell it to third parties.

The use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Duevaro does not read your Gmail inbox content. Google Workspace/Gmail data is never sent to any AI or machine-learning provider, and is never used to train or improve any AI/ML model. Duevaro's AI reminder-writing feature only uses data you have entered directly into Duevaro — such as invoice, client and payment information.

Duevaro uses Microsoft OAuth and Microsoft Graph only to confirm which mailbox you have connected and to send reminder emails from that mailbox. We request the minimum permissions needed for sending, and you can revoke access at any time from Duevaro or from your Microsoft account settings.

Subscription payments are processed by Stripe. Card details are entered directly with Stripe and are never stored on Duevaro servers. We store only the information needed to show your plan, trial period, renewal date, and receipts. Stripe's handling of your payment data is governed by Stripe's own privacy policy.

We share data only with service providers that help us operate Duevaro, including:

• Hosting and application infrastructure providers.
• Database, authentication, and file storage providers.
• Email APIs (Google Gmail API, Microsoft Graph) used to deliver your reminders.
• Stripe for payments and subscription management.
• Product analytics and error monitoring tools.

We may also disclose information where required by law, to protect our rights, or as part of a business transfer such as a merger or acquisition. Any successor remains bound by this policy.

We keep your account, client, and invoice data for as long as your account is active so the service works as expected. If you close your account, we delete or anonymise your data within a reasonable period, except where we must keep records for legal, tax, or accounting reasons. You may request deletion at any time by emailing [support@yourdomain.com].

We use reasonable technical and organisational measures to protect your data, including encrypted connections, access controls, and row-level database permissions so each account can only reach its own records. OAuth credentials and sensitive tokens are stored encrypted server-side and are never exposed to the browser. No online service can promise perfect security, so please use a strong, unique password.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your data or close your account.
• Export a copy of your data in a portable format.
• Object to or restrict certain processing.

To exercise any of these, contact [support@yourdomain.com]. We aim to respond promptly.

We use essential cookies and similar storage to keep you signed in and to remember your preferences. We may also use privacy-conscious analytics to understand how the product is used in aggregate. You can block or clear cookies in your browser, though some parts of Duevaro may stop working correctly.

Duevaro is operated from [Your Country]. Your information may be processed and stored in other countries where our service providers operate. Where required, we rely on appropriate safeguards for international transfers.

We may update this policy as the product evolves. When we make material changes we will update the date at the top of this page and, where appropriate, notify you by email or in-app.

[Your Company Name]
Email: [support@yourdomain.com]
Website: [https://yourdomain.com]
Jurisdiction: [Your Country]