Privacy Policy

1. Who we are

PayWren is an invoicing and financial management platform for New Zealand freelancers and contractors. References to "PayWren", "we", "us", or "our" in this policy refer to the PayWren service and its operators.

2. Information we collect

• Account information — name, email address, and password (stored securely via Clerk).
• Workspace data — business name, address, NZBN, GST number, and billing preferences you enter.
• Invoice and client data — client names, email addresses, invoice amounts, line items, and payment records you create.
• Usage data — pages visited, features used, and error logs to help us improve the product.
• Payment information — processed securely by Stripe. We do not store card numbers.

3. How we use your information

• To provide and operate the PayWren service.
• To send transactional emails (invoice delivery, payment notifications, receipts).
• To calculate GST, withholding tax, and generate IRD-ready reports.
• To improve the product through aggregated, anonymised usage analytics.
• To respond to support requests.
• To comply with New Zealand legal obligations.

4. Data storage and security

Your data is stored in secure cloud infrastructure (Neon Postgres, Vercel Blob) hosted in data centres that meet industry-standard security requirements. We use encryption in transit (TLS) and at rest. We do not sell your data to third parties.

5. Third-party services

• Clerk — authentication and user management.
• Stripe — payment processing for PayWren subscriptions.
• Vercel — hosting and infrastructure.
• Neon — database storage.
• Resend — transactional email delivery.

6. Your rights (NZ Privacy Act 2020)

Under the Privacy Act 2020 you have the right to access the personal information we hold about you, request corrections, and ask us to delete your account and associated data. To exercise these rights, email us at support@paywren.app.

7. Cookies

We use essential cookies for authentication (session tokens via Clerk). We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this will prevent you from signing in.

8. Data retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it (e.g. for tax or fraud-prevention purposes).

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of PayWren after a change constitutes acceptance of the updated policy.

10. Contact

Questions or concerns? Email us at support@paywren.app — we aim to respond within 2 business days.