Privacy Policy

Effective Date: May 2, 2026  ·  Last Updated: May 2, 2026

This Privacy Policy describes how PaidPair (“PaidPair,” “we,” “us,” or “our”) collects, uses, and protects information about users of the PaidPair web application available at https://paidpair.com and https://paidpair.app (together, the “Service”). PaidPair is operated by Date Palm Resources LLC.

PaidPair is a record-keeping and reminder tool for personal interest-free loans between individuals. PaidPair is not a lender, payment processor, or money-transfer service. We do not collect, hold, or transfer any funds. All financial transactions between users occur independently through third-party services (such as Venmo, Zelle, or cash) outside of PaidPair.

1. Information We Collect

When you create an account or use the Service, we collect:

• Account information: your email address, password (stored as a one-way hash), full legal name, mobile phone number, and a unique user handle that you choose.
• Loan-related information: the dollar amount, dates, optional notes, and status of each loan you create or accept; the identity of the other party to each loan (linked by their user handle).
• Payment evidence: screenshots of payment confirmations that you choose to upload, and any notes you attach to them.
• Communications: notifications, messages, and event records generated by your activity in the Service.
• Technical data: standard server logs (IP address, browser type, pages visited, timestamps) used for security and operational diagnostics.

We do not knowingly collect information from anyone under the age of 18. The Service is intended for adults only.

2. How We Use Information

We use the information we collect to:

• Provide and operate the Service (create your account, record loans, generate reminders, deliver notifications).
• Verify your identity at signup via a one-time SMS verification code sent to your mobile number.
• Send you transactional SMS messages about loans you participate in (loan invitations from other users, payment-due reminders 3 days before the due date, on the due date, and every 14 days if a payment is overdue, payment confirmations, and dispute notifications).
• Display loan information to the other party of any loan you create or accept.
• Diagnose and fix technical issues, prevent fraud, and protect the security of the Service.
• Comply with applicable law and respond to lawful requests.

We do not use your information for advertising or marketing. We do not send promotional SMS messages.

3. SMS Messaging — Consent and Opt-Out

By verifying your mobile phone number during signup, you affirmatively consent to receive transactional SMS messages from PaidPair related to your account and loan activity. Message frequency is per-loan, typically 3–6 messages over the lifetime of each loan you participate in.

Message and data rates may apply. Charges depend on your mobile carrier plan; PaidPair does not bill you for messages.

You may opt out of all PaidPair SMS at any time by replying STOP to any message we send. After you reply STOP, we will not send you further SMS until you opt back in through the app. Reply HELP to any message for support contact information.

PaidPair uses Twilio Inc. as its SMS delivery provider. Twilio’s processing of your phone number is governed by Twilio’s privacy policy (https://www.twilio.com/legal/privacy).

4. How We Share Information

We share information only as follows:

• With the other party to a loan you create or accept: your full legal name, user handle, and the loan details are shown to that user after the loan is mutually accepted. Before acceptance, only your user handle is visible.
• With service providers we rely on to operate PaidPair: Supabase Inc. (database, authentication, file storage, hosted in the United States); Twilio Inc. (SMS delivery); Replit Inc. (application hosting). Each of these providers processes data only on our behalf and under their own published privacy practices.
• As required by law: in response to subpoenas, court orders, or other legal process, or to protect the rights, safety, or property of PaidPair, our users, or others.

We do not sell, rent, or trade your personal information to third parties for any purpose.

5. Data Storage and Security

User data is stored in Supabase Inc. databases hosted in Amazon Web Services US-West-2 (Oregon, USA). Passwords are stored only as one-way bcrypt hashes; we cannot recover your password and will never ask you for it. Payment screenshots are stored in private Supabase Storage with access restricted to the parties to the relevant loan, accessed only via short-lived signed URLs.

We use industry-standard security practices including transport encryption (TLS), database row-level security policies, and isolated server-side credentials. No security system is perfect, and we cannot guarantee absolute security.

6. Data Retention and Deletion

We retain account and loan data for as long as your account is active. You may delete your account at any time through the app’s account settings, which will:

• Remove your personal profile information from active display.
• Anonymize your historical loan records (the loan-event audit trail is preserved in a non-identifying form, since loan records are jointly relevant to the other party).
• Permanently delete uploaded payment screenshots within 30 days of account deletion.

Server logs are retained for up to 90 days. Aggregated, non-identifying analytics may be retained longer for product improvement.

7. Your Rights

Depending on where you live, you may have specific rights under applicable privacy laws (including the California Consumer Privacy Act and the EU/UK General Data Protection Regulation), such as the right to access, correct, delete, or restrict processing of your personal information; to object to certain processing; and to data portability.

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

8. Children’s Privacy

PaidPair is not directed at children under the age of 18 and we do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us and we will promptly delete the account and associated data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects the most recent revision. Material changes will be communicated through the Service or via email to your registered address. Continued use of PaidPair after a revision takes effect constitutes acceptance of the updated policy.

10. Contact

For privacy questions, requests to exercise your rights, or to report a concern, contact:

PaidPair (Date Palm Resources LLC)
Email: support@paidpair.com