Privacy Policy

We collect:

• Account information: your business name and email address when you sign up, and the password you choose.
• Invoice data: when you connect Xero or Stripe, Follo reads the sales invoices in that account, including ones already paid, and keeps the details it needs to send reminders: client name, client email, invoice number, invoice date, due date, amount, currency, and whether the invoice has been paid. In Xero, Follo also reads your contact list to find your clients' email addresses, and keeps only the clients who appear on invoices. Follo does not read your account balances, bank transactions or payment credentials, and it does not create invoices, take payments or move money. Xero access is read-only. Stripe does not offer a read-only option to apps like Follo, so the permission Stripe shows you is wider than what Follo uses.
• Reminder activity: a record of which reminders were sent, to which invoice, and when, so you and we can see what went out.
• Contact form and email messages: anything you send us through the website's contact form or by emailing us.
• Basic usage data: standard web server and hosting logs (e.g. page requests, error logs) collected automatically by our hosting provider.

We use your information to:

• operate the Follo service, including sending payment reminders on your behalf;
• respond to support and contact requests;
• keep the service secure and diagnose problems;
• tell you about important changes to Follo (e.g. this policy, pricing, or an account issue).

We do not sell your information, and we do not use your clients' contact details for anything other than sending the reminders you set up.

Follo runs on a small number of service providers, each of whom only sees the data they need to do their job:

• Supabase (database and authentication);
• Vercel (application hosting);
• Resend (sending reminder emails and account emails);
• Cloudflare (checking that our forms are filled in by a person, not a bot);
• Xero and Stripe (only if and when you choose to connect your own account).

Our sign-up, log in, password reset and contact forms use Cloudflare Turnstile to check you are a real person, which is covered by Cloudflare's Turnstile Privacy Addendum and Privacy Policy.

We don't share your information with anyone else, except where required by law.

We keep your account and invoice data for as long as your account is active. If you close your Follo account, we delete your personal data within a reasonable period afterwards, except where we're required to keep records for longer (for example, for tax or accounting purposes).

You can ask us to access, correct, or delete the personal information we hold about you at any time, by contacting us through the website. If you're in New Zealand, you have rights under the Privacy Act 2020; if you're elsewhere, local privacy law may give you additional rights.

Follo uses only the cookies the service needs to work: the ones that keep you signed in, and a few short-lived ones used while you connect Xero or Stripe (10 minutes at most) and to show the "connected" message (30 seconds). We don't use advertising or cross-site tracking cookies.

Follo is a business tool and isn't directed at children.

If we make a material change to this policy, we'll update the date above and, where appropriate, let existing users know by email.

Questions about this policy or your data? Use the contact form on our Contact page.