Last updated: 6 October 2026

Privacy Policy

PayWren is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights under the New Zealand Privacy Act 2020.

1. Who we are

PayWren is an invoicing and financial management platform for New Zealand freelancers and contractors. References to "PayWren", "we", "us", or "our" in this policy refer to the PayWren service and its operators.

2. Information we collect

  • Account information: name, email address, and password (stored securely via Clerk).
  • Workspace data: business name, address, NZBN, GST number, and billing preferences you enter.
  • Invoice and client data: client names, email addresses, invoice amounts, line items, and payment records you create.
  • Documents you upload: receipts, bank and credit card statements, and copies of GST returns you choose to import.
  • Usage data: pages visited, features used, and error logs to help us improve the product.
  • Payment information: processed securely by Stripe. We do not store card numbers.

3. How we use your information

  • To provide and operate the PayWren service.
  • To send transactional emails (invoice delivery, payment notifications, receipts).
  • To calculate GST, withholding tax, and generate IRD-ready reports.
  • To read documents you upload and suggest details for you to check (see section 5, AI-assisted features).
  • To improve the product through aggregated, anonymised usage analytics.
  • To respond to support requests.
  • To comply with New Zealand legal obligations.

4. Data storage and security

Your invoices, expenses, documents and other business records are stored in Australia (Sydney), in Neon Postgres and Vercel Blob. We use encryption in transit (TLS) and at rest. Some of the providers listed in section 6 process information outside New Zealand and Australia, including in the United States. This includes your sign-in details, outgoing email, error reports and AI-assisted features. We only use providers with independent security certifications, and we take reasonable steps to make sure they protect your information to a standard comparable to the Privacy Act 2020. We do not sell your data.

5. AI-assisted features

Some PayWren features use AI to save you typing: reading receipts and bank or credit card statements you upload, suggesting expense categories, pulling totals from GST returns you import, drafting invoice line items from your description, drafting payment reminder emails, and writing a plain-English summary of your tax position. For these features we send only what the feature needs to Anthropic's Claude model, through Vercel AI Gateway, and it is processed in the United States. Expense category suggestions don't include your name or contact details, and tax summaries use rounded figures. Anthropic does not use your data to train its models. AI output is always a suggestion you can review and change. AI never files anything with Inland Revenue, and your GST and tax figures are calculated by PayWren's own tax rules, not by AI.

6. Third-party services

  • Clerk: authentication and user management.
  • Stripe: payment processing for PayWren subscriptions.
  • Vercel: hosting, file storage, and website analytics.
  • Neon: database storage.
  • Maileroo: transactional email delivery.
  • Anthropic (via Vercel AI Gateway): AI-assisted features (see section 5).
  • Sentry: error monitoring, so we can find and fix bugs.
  • Google Analytics: aggregated website usage statistics.
  • Apple: push notifications for the PayWren iOS app.

7. Your rights (NZ Privacy Act 2020)

Under the Privacy Act 2020 you have the right to access the personal information we hold about you, request corrections, and ask us to delete your account and associated data. To exercise these rights, email us at support@paywren.app.

8. Cookies

We use essential cookies for authentication (session tokens via Clerk). We also use Google Analytics cookies to understand, in aggregate, how people use our websites. We do not use advertising cookies or sell browsing data. You can block analytics cookies in your browser settings without affecting PayWren. Blocking all cookies will prevent you from signing in.

9. Data retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it (e.g. for tax or fraud-prevention purposes).

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of PayWren after a change constitutes acceptance of the updated policy.

11. Contact

Questions or concerns? Email us at support@paywren.app. We aim to respond within 2 business days.

Terms of Service →← Back to home
Privacy PolicyTerms of Servicesupport@paywren.app