Privacy policy
Last updated 4 November 2026. Zenze, Entebbe, Uganda. Contact: support@paidupbyzenze.com
PaidUp is an invoice and payment reminder service (accounts receivable software) operated by Zenze("PaidUp", "we"). Businesses use PaidUp to send polite reminders about their own unpaid invoices to their own customers, and to keep track of what has been paid. This policy explains what personal data we handle, why, and the rights you have.
1. Who is responsible for your data
- Business owners and their staff (our account holders): we decide how their account data is used, so we are the controller of that data.
- Customers of those businesses (people and companies who receive reminders): the business decides whom to contact and why, so the business is the controller and PaidUp acts as its processor, handling the data only on the business's instructions and under a data-processing agreement. If you received a reminder, please contact that business first; we will help it respond.
2. Data we handle
- Account data: name, email address, phone number, password (stored only as a secure hash), business name, country, currency and settings.
- Customer data entered by businesses: customer names, contact people, phone numbers, email addresses, country, invoices, amounts, due dates, payments, promises to pay, notes.
- Messages: the content, channel, recipient, delivery status and timing of reminders sent, and replies received.
- Consent records: when and how a customer agreed to receive WhatsApp or SMS messages, and any opt-out.
- Subscription payments: the plan you choose, the amount, the reference code, the bank transfer or card transaction reference, and when the payment was confirmed. Card payments are made on Flutterwave's secure page; Flutterwave handles your card details under its own privacy policy, and PaidUp never receives or stores card numbers. We do not collect bank account numbers.
- Reviews: if you review PaidUp, your name, rating, review text and registered company name. Reviews are shown publicly on the PaidUp website as soon as you send them; you can ask us to remove yours at any time.
- Technical data: audit logs of actions taken in the service, security logs and basic device and browser information.
We do not use this data for advertising, and we do not sell or rent personal data to anyone.
3. Why we use it and our legal bases
- To provide the service (sending reminders, tracking invoices and payments, showing history): performance of our contract with the business; for customer data, on the business's instructions.
- To keep the service safe and working (security, fraud prevention, debugging, audit logs): our legitimate interests in running a secure, reliable service.
- To meet legal obligations (tax, accounting, responding to lawful requests): legal obligation.
- To honour messaging rules (recording consent and opt-outs, contact hours): legal obligation and the business's instructions.
4. Who we share data with
Only with service providers that help us run PaidUp, under contracts that require them to protect the data and use it only for us: hosting and database providers, messaging providers that deliver SMS, WhatsApp and email (for example Meta's WhatsApp Business Platform or a WhatsApp business solution provider, SMS aggregators and email delivery services), and error-monitoring tools. We may disclose data where the law requires it. A current list of sub-processors is available from support@paidupbyzenze.com.
5. International transfers
Our providers may process data outside your country. Where the law requires it, we use appropriate safeguards, such as standard contractual clauses approved under GDPR/UK GDPR, or transfers permitted by local law (for example Kenya's Data Protection Act, South Africa's POPIA or Canada's PIPEDA).
6. How long we keep it
We keep account and customer data while the business's account is active. When an owner asks us to delete their account, we permanently delete it and the business data within 30 days (see Data deletion). We keep a minimal record that a deletion happened, with dates but no personal details. Backups are overwritten on a rolling basis. Some records may be kept longer where the law requires it.
7. Security
We encrypt data in transit, restrict access to the people who need it, store passwords only as hashes, keep audit logs of important actions and apply updates to our systems. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authorities as the law requires.
8. Your rights
Depending on where you live, you can ask us to:
- access a copy of your personal data, or receive it in a portable format;
- correct inaccurate data;
- delete your data;
- restrict or object to certain uses;
- withdraw consent where we rely on it (for example, reply STOP to stop SMS reminders).
Email support@paidupbyzenze.com. We respond within the time the law requires (typically one month). You can also complain to a data-protection authority.
9. Country-specific information
- European Union and United Kingdom (GDPR / UK GDPR): the rights above apply in full. You can complain to your national supervisory authority, or in the UK to the Information Commissioner's Office.
- Kenya (Data Protection Act, 2019): you have the rights of a data subject under the Act and may complain to the Office of the Data Protection Commissioner.
- South Africa (POPIA): you may complain to the Information Regulator.
- Canada (PIPEDA and CASL): you can access and correct your information and complain to the Office of the Privacy Commissioner of Canada. Reminders about an existing invoice are transactional messages; every SMS includes a way to opt out.
- United States: residents of states with consumer privacy laws (such as California) may have rights to know, delete and correct personal information. We do not sell or share personal information for cross-context behavioural advertising.
- Other countries: we follow the data-protection law that applies to you; contact us to exercise your rights.
10. Children
PaidUp is a business service and is not intended for children.
11. Changes
We will update this page when our practices change and tell account holders about significant changes.
12. Contact
Zenze, Entebbe, Uganda. Email: support@paidupbyzenze.com.