Privacy Policy | collect.ac

When you use collect.ac, we collect information that helps us provide our invoice collection services:

• Account Information: Name, email address, password, and organization details you provide during registration
• Invoice Data: Invoice PDFs or images, customer information, payment terms, and amounts uploaded to our platform
• Communication Data: Email and SMS communications sent through our automated follow-up system
• Usage Data: Information about how you interact with our service, including features used, login times, and device information
• Payment Information: Billing details and payment transaction records (we do not store full credit card numbers)

We use the information we collect to:

• Provide, operate, and maintain our invoice collection services
• Send automated customer follow-up emails and SMS messages on your behalf
• Process payments and manage your subscription
• Monitor usage patterns and improve our service quality
• Communicate with you about account updates, security alerts, and support messages
• Comply with legal obligations and enforce our Terms of Service
• Prevent fraud and protect the security of our platform

If you are in the European Union or United Kingdom, we process your personal data based on:

• Contractual necessity: Processing needed to provide our services to you
• Legitimate interests: Improving our service, security, and business operations
• Legal obligations: Compliance with applicable laws and regulations
• Consent: Where you have explicitly consented to specific processing activities

We do not sell your personal data. We may share information in the following situations:

• With your consent: When you authorize us to share data (e.g., connecting to accounting software)
• Service providers: With trusted vendors who help us operate our service (e.g., email providers, SMS gateways, cloud infrastructure)
• Partner agencies: When you escalate a case to a debt collection partner, we share relevant invoice and customer information with that partner
• Legal requirements: When required by law, subpoena, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

We take reasonable technical and organizational measures to protect your data:

• Encryption: Data is encrypted in transit (TLS) and at rest
• Access controls: Strict access controls limit who can access customer data
• Infrastructure: We use reputable cloud infrastructure providers with strong security certifications
• Backups: Regular backups are performed to prevent data loss
• Auditing: Access logs and audit trails are maintained for security monitoring

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

We retain your data for as long as your account is active and for a reasonable period thereafter to fulfill business purposes, including:

• Maintaining records of invoice collection activities and payment history
• Complying with legal and accounting requirements
• Resolving disputes and enforcing our agreements
• Analytics and business improvement purposes

When retention is no longer necessary, we securely delete or anonymize your data. Upon account cancellation, you can download your data before deletion.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Restriction: Request restriction or objection to certain processing activities
• Portability: Request transfer of your data to another service
• Withdraw consent: Withdraw consent where we rely on it as the legal basis

To exercise these rights, contact us at privacy@collect.ac. We will respond within 30 days.

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Reliance on adequacy decisions where applicable
• Strict data processing agreements with all service providers

Our website uses cookies and similar technologies to:

• Remember your login state and preferences
• Understand how you use our website and improve our services
• Provide analytics about website usage

Most web browsers automatically accept cookies. You can control cookie usage through your browser settings. Disabling cookies may limit your ability to use certain features of our service.

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected such data, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending email notification for significant changes

Your continued use of collect.ac after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@collect.ac

If you are a California resident, the California Consumer Privacy Act (CCPA) provides additional rights:

• Right to know what personal data is collected, used, shared, or sold
• Right to delete personal data collected from you
• Right to opt-out of the sale or sharing of personal data (we do not sell personal data)
• Right to non-discrimination for exercising CCPA rights

To exercise CCPA rights, contact us at privacy@collect.ac.