Privacy Policy

Account information. When you create a BumpPay account, we collect your name, email address, and password (stored as a secure hash).

Organization details. Business name, timezone, and preferences you configure in settings.

Invoice and client data. When you connect an integration, BumpPay reads invoice records and client contact information (names, email addresses, invoice amounts, and due dates) from your connected Stripe or QuickBooks account. We store this data to power your reminder sequences.

Integration credentials. OAuth tokens that allow BumpPay to access your Stripe or QuickBooks account on your behalf. These tokens are encrypted at rest and never exposed.

Usage data. Log data including IP addresses, browser type, pages visited, and actions taken within the app. This helps us diagnose issues and improve the product.

Payment information. If you subscribe to BumpPay Pro, billing is handled entirely by Stripe. We store only a Stripe customer ID — we never see or store your credit card number.

We use the information we collect to:

• Provide and operate the BumpPay service, including sending automated invoice reminder emails to your clients on your behalf.
• Sync invoice and payment status from Stripe and QuickBooks so your dashboard stays current.
• Send you transactional emails (e.g., account confirmations, password resets, and reminder delivery receipts).
• Improve the product through aggregated, anonymized usage analytics.
• Respond to support requests and troubleshoot problems.
• Comply with legal obligations.

We do not use your data to train AI models or sell it to third parties for advertising.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. We share data only with:

We may also disclose data if required to do so by law or in response to a valid legal request.

We use industry-standard security practices to protect your data:

• All data is transmitted over HTTPS/TLS.
• Passwords are hashed using bcrypt and never stored in plaintext.
• OAuth tokens for Stripe and QuickBooks are encrypted at rest.
• Access to production systems is restricted to authorized personnel.
• We perform regular backups and monitor for anomalous activity.

No system is 100% secure. If you discover a security vulnerability, please report it to [email protected].

You have control over your data:

• Access and export. You can view and export your account data at any time from your settings.
• Correction. You can update your account information directly in the app.
• Deletion. You can delete your account at any time. We will permanently delete your data within 30 days, except where we are required to retain it by law.
• Disconnect integrations. You can revoke BumpPay's access to Stripe or QuickBooks at any time from your integration settings. Disconnecting will stop syncing and sending reminders.

To exercise any of these rights, contact us at [email protected].

We retain your account data for as long as your account is active. Invoice and client data synced from integrations is kept to provide the service. When you delete your account or disconnect an integration, we remove associated data within 30 days.

Aggregated, anonymized usage statistics may be retained indefinitely as they cannot identify you.

If you have questions about this Privacy Policy or how we handle your data, please reach out:

We will respond within 5 business days. If we update this policy in a material way, we will notify you by email and update the "Last updated" date above.