Privacy Policy

Bend Pays, Inc. (“Bend”) operates the Bend AR collections platform. This Privacy Policy explains what data we collect, how we use it, and the choices you have. It applies to business customers (tenants) and to the consumers our tenants send invoices to via Bend.

1. Data we collect

• From tenants: authentication identifiers (email, SSO claims), accounting-system OAuth tokens (QuickBooks, Xero, NetSuite), team-member roles and permissions, and platform usage events.
• From consumers (your customers) paying via Bend:name, email, phone, billing address, payment-method tokens issued by Stripe, dispute notes, and IP / user-agent metadata captured at the moment of payment, consent, or signature for fraud and audit purposes.
• From accounting systems: customer records, invoices, payments, and credit memos. Bend is a system of engagement; accounting systems remain the system of record.

2. How we use data

Tenant data powers your AR workflow: cadence delivery, reconciliation, reporting, dispute resolution. Consumer data is used to deliver invoices, accept payments, and document interactions for the tenant’s records. We do not sell consumer data and do not use it to train general-purpose models.

3. Sharing

We share data with subprocessors strictly to operate the service — Stripe (payments), Resend (email), Neon (Postgres hosting), Vercel (application hosting), Anthropic (per-tenant opt-in AI features). Our full subprocessor list is available at /security.

4. Retention

Tenant business records (invoices, payments, audit log) are retained for the life of the tenant relationship plus seven years for tax / audit compliance. Authentication metadata is retained 18 months after last sign-in. Consumer-side data is retained per the tenant’s documented retention policy.

5. Your rights

Consumers can request export or deletion of their data via the email their tenant sent the invoice from, or by emailing privacy@bendpays.com. Tenants can export their data at any time via the Reporting → Exports flow. We respond to verified requests within 30 days.

6. Communication consent and opt-out

Bend distinguishes transactional communications from commercial communications and treats consent separately for each channel — email, SMS, voice, and postal mail. Every opt-in and opt-out is recorded as an immutable event in the consent ledger with a timestamp, source IP, user-agent, and a hash of the disclosure text shown at consent time.

• Transactional messages — sign-in links, payment receipts, PIN codes, and direct responses to actions you take — will be sent regardless of opt-out state, because each is a direct reply to something you just asked for. Sending these is necessary to deliver the service you requested.
• Commercial messages— payment-reminder cadences dispatched on the tenant’s behalf — always honor your opt-out. The platform’s communications policy engine checks the consent ledger before every outbound cadence step; if your most recent event for that channel is opt_out or withdraw, the send is suppressed and the suppression is logged.
• Per-channel control — opting out of email does not opt you out of SMS, voice, or postal mail (or vice versa). Each channel is consented to independently.
• How to opt out — payers with an account can manage all channels at /account/consent. Anyone else can reply STOP to an SMS, click the unsubscribe link in a marketing email, or contact privacy@bendpays.com.

SMS, voice, and postal mail are not yet active channels in this deployment; the consent ledger is wired and ready, so the moment those channels go live they will respect existing opt-out state without any additional configuration.

7. Security

All data is encrypted in transit (TLS 1.2+) and at rest (database provider managed). We follow the security practices documented at /security. Report a vulnerability to security@bendpays.com.

8. Changes

We may update this policy as the service evolves. Material changes will be announced at least 30 days in advance via email to tenant admins.

9. Contact

Privacy questions: privacy@bendpays.com. Address: Bend Pays, Inc., legal address forthcoming.