Privacy Policy
Duevero is a business finance tool built for freelancers, contractors, and service businesses. This policy explains what data we collect, how we use it, and what controls you have.
What we collect
- Account information: your email address and hashed password when you create an account.
- Business profile: business name, owner name, address, phone, and tax ID you add in settings. This appears on invoices you create.
- Invoice and client data: invoices, line items, client names, and amounts you enter. This data belongs to you.
- Expense data: expenses you log, including category, amount, date, and description.
- Usage events: anonymous product events (e.g. invoice created, upgrade clicked) to help us understand how the product is used. Not shared with advertisers.
- Payment information: we do not store card numbers. Square processes Pro subscription billing and client invoice card payments. Historical billing records may reference Stripe. Card data is handled by PCI-compliant infrastructure and never stored on our servers.
How we use your data
- Run the product — serve your invoices, expense records, and reports.
- Generate public invoice links for your clients to view and pay.
- Process your Pro subscription via our billing provider.
- Send transactional emails (account confirmation, password reset).
- Improve the product based on aggregate usage patterns.
- We do not sell your data. We do not use it for advertising.
Third-party services
- Square: Pro subscription billing and client invoice card payments. Square has its own privacy policy at squareup.com/us/en/legal/general/privacy.
- Stripe: historical Pro subscription billing (legacy). Stripe has its own privacy policy at stripe.com/privacy.
- PostHog: product analytics. Anonymous event tracking to understand feature usage. Data is not shared with advertisers.
- Your hosting provider: we run on infrastructure that stores your data in the United States.
Your data rights
- Export: download your invoice and expense data at any time from CSV Exports (Pro) or by emailing us.
- Delete: request full account and data deletion at any time by emailing hello@duevero.com. We will process your request within 30 days.
- Correction: update your business profile and account details directly in the app.
- Portability: your data belongs to you.
Data security
Passwords are hashed using bcrypt. All data is transmitted over HTTPS. Payment card data is handled by PCI-compliant payment processors — we never store raw card numbers. Sessions are stored securely server-side.
Cookies and sessions
We use a session cookie to keep you logged in. We do not use tracking cookies or third-party ad cookies. PostHog may set a cookie for product analytics.
Contact
Questions about this policy or your data? Email hello@duevero.com.