Privacy Policy
Last updated: May 14, 2026
PAID ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.
1. Information We Collect
We collect information that you provide directly to us and information that is automatically collected when you use our App:
- Account Information: Name, email address, phone number, business name, and other details you provide during registration.
- Financial Information: Through our integration with Plaid Inc., we access bank account transaction history and balances, used solely to evaluate lending opportunities.
- Profile Information: Business type, industry, revenue details, and professional credentials you choose to share.
- Application Data: Information submitted in loan applications, including uploaded documents and business records.
- Device Data: Device type, operating system version, and technical diagnostics for app improvement.
We do not sell your personal information. Your financial data is encrypted and shared only with lenders you explicitly choose to apply to.
2. How We Use Your Information
We use the collected information for the following purposes:
- Match your business with suitable lending opportunities on our marketplace.
- Verify your identity and business credentials.
- Process and forward loan applications to your selected lenders.
- Send notifications about application status, matches, and account updates.
- Process subscription payments via Stripe.
- Improve and personalize your experience within the App.
- Detect and prevent fraudulent or unauthorized activity.
3. Camera & Storage Permissions
Our App requests the following device permissions for specific, limited purposes:
- Camera (android.permission.CAMERA): Used exclusively to allow you to capture photos of documents (such as business licenses, government-issued ID, or financial statements) required for loan applications. The camera is only activated when you explicitly choose to take a photo. We do not access the camera in the background or without your action.
- Storage / Media Access (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE, READ_MEDIA_IMAGES, READ_MEDIA_VIDEO): Used to let you select and upload existing documents or images from your device for loan applications. Access is only triggered by your explicit action.
No images or media files are ever uploaded from your device without your explicit selection and confirmation.
4. Third-Party Services
We share your information with the following third-party services only to the extent necessary to provide our services:
- Plaid Inc. — Facilitates secure bank account linking. Plaid's handling of your banking data is governed by Plaid's own privacy policy at plaid.com/legal.
- Supabase Inc. — Provides our backend database and authentication infrastructure. Your data is stored with encryption at rest and in transit.
- Stripe Inc. — Processes subscription payments. We do not receive or store your full credit card or payment details. Stripe's privacy policy is available at stripe.com/privacy.
5. Data Security
We implement industry-standard administrative, technical, and physical security measures to protect your personal information. Data is encrypted in transit using TLS and at rest. Our database implements row-level security, ensuring each user can only access their own data. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account remains active or as necessary to provide you services. Upon your request, we will delete or anonymize your data within 30 calendar days, unless we are required to retain certain information by applicable law (e.g., for tax or audit purposes).
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- The right to access and obtain a copy of your personal data.
- The right to rectify inaccurate or incomplete data.
- The right to request deletion of your data ("right to be forgotten").
- The right to withdraw consent at any time, where processing is based on consent.
- The right to data portability.
- The right to lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, contact us at the email address listed below.
8. Children's Privacy
Our App is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will delete it immediately.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the App and updating the "Last updated" date. Your continued use of the App after any changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy, or wish to exercise your data rights, please contact us: