Privacy Policy

Duevo (getduevo.com) is an invoice follow-up service. We help businesses collect on outstanding B2B invoices by sending professional follow-up emails in their name, under rules they set. We are not a collection agency and we never touch your money.

References to "we", "us", or "Duevo" in this policy mean the company operating getduevo.com. References to "you" mean the business that has signed up for or is evaluating our service.

We collect information in two ways:

• –Account information you provide. When you sign up, we collect your name, work email address, and the name of your business. During onboarding, you tell us your follow-up preferences (tone, timing, which clients to treat carefully). That policy lives in our system as your configuration.
• –Accounting data from your ledger. If you connect an accounting system such as QuickBooks Online, we read your open invoices, your clients' business contact details, and payment events. We read only what we need to schedule and draft follow-ups: invoice number, amount, due date, client name, and client email. We do not read your bank account, payroll, or any data unrelated to accounts receivable.

We do not use cookies for tracking. We do not collect personal data from your clients beyond what already exists in your own accounting system.

We use your data for exactly one purpose: providing the service you signed up for.

• –Draft follow-up emails based on your invoice data and your policy settings.
• –Present those drafts to you for approval before anything is sent.
• –Send approved messages from a billing subdomain on your own domain.
• –Detect inbound replies and pause follow-ups when a client claims to have paid.
• –Report recovered amounts, aging trends, and decision metrics to you.

We do not sell your data. We do not use your data to train AI models beyond what is necessary to process your specific requests in real time. We do not share your data with third parties except the service providers below, each of whom is contractually bound to confidentiality and uses your data only to provide services to us:

• –Cloud hosting — to store and run the service.
• –Email delivery (Resend) — to send and receive messages on your behalf.
• –AI processing (Anthropic) — to adjust tone in draft messages and classify inbound replies. Only the minimum invoice and message context needed is sent; no client contact lists are transmitted.

When you connect QuickBooks Online (or another supported accounting system), you authorise the connection through that provider's own OAuth flow. We receive an access token, which we encrypt and store. We never see your QuickBooks password.

• –Read-only. Our integration reads your invoices, client contacts, and payment status. We never create, edit, or delete anything in your books.
• –Encrypted storage. Access and refresh tokens are stored using Fernet symmetric encryption. The encryption key is stored separately from the tokens.
• –Revocation. You can disconnect the integration at any time from within the product or directly from your QuickBooks account. On disconnection, we delete your stored tokens and stop syncing. On written request we will delete all previously synced ledger data.

All data is transmitted over TLS. Data at rest is encrypted on the server. Access to production systems is restricted to authorised personnel. OAuth tokens are encrypted individually using a dedicated key.

No system is perfectly secure. If we discover a breach that affects your data, we will notify you promptly and take steps to contain it.

We keep your data while your account is active. If you close your account or ask us to delete your data, we will do so within 30 days, except where we are required by law to retain certain records for a longer period.

To request deletion, email us at info@getduevo.com with the subject line "Delete my data".

Questions about this policy? Email us at info@getduevo.com.