Privacy policy

Last updated 24 October 2026

Who we are

Duebill is operated by Samet Ateşen, trading as Atesen Software, an independent developer in Sakarya, Türkiye. Contact: support@atesensoftware.com.

What we process

• Your account e-mail address, sign-in records and session cookies.
• Your Stripe restricted API key, encrypted.
• From your Stripe account, only what a claim needs: invoice ids and numbers, amounts, due and paid dates, and customer ids. We do not copy your customers' names or e-mail addresses; Stripe sends the claim invoice to them.
• The claims we calculate, the ones you approve or skip, your reasons, and your settings.
• Your plan and subscription status from Paddle. Card details never reach us.
• After a purchase we send one plain-text thank-you and getting-started e-mail, through Resend, to the address on your Paddle payment record; we do not store that address for this.
• Server logs (request path, status, timing; keys and e-mail addresses masked), kept for 30 days.

Waitlist

If you join the waitlist we store your e-mail address, the plan you picked (if any) and the date. We use it once, to tell you when sign-ups open, with your consent. It is deleted automatically after 12 months, or earlier if you ask.

Why

To provide the service you asked for (contract), to keep it secure (legitimate interest), and to keep billing records (legal obligation).

Your customers' data

We process it only as your processor, only to calculate and create the claims you approve. We do not sell it, use it for marketing, or train AI on it. A data processing agreement is available on request.

How long we keep it

• Stripe keys: deleted immediately when you disconnect.
• Claims, settings and audit records: while your account is active; deleted when you delete your account (Settings, Delete account), and from backups within 7 days.
• Sign-in links: 15 minutes. Sessions: 30 days.

Sub-processors

• Railway (application hosting, EU region) and Cloudflare (network and TLS).
• Resend (sign-in, daily summary and purchase thank-you e-mails).
• Paddle (checkout, subscription billing and tax, as merchant of record).
• Stripe (your own account; we call its API with your key).

No analytics or advertising trackers run on this site.

Your rights

Access, correction, deletion, portability and objection under UK GDPR, the EU GDPR and KVKK. E-mail support@atesensoftware.com; we reply within 30 days. You may also complain to the ICO or your local data protection authority.