What we collect, and what we do with it

Your account. Your business name and email address when you sign up, and your plan and billing status.

Your QuickBooks data.When you connect QuickBooks, we read your invoices, customers, and payment status. QuickBooks grants apps a single accounting permission that technically covers both reading and writing — Intuit doesn't offer a read-only version — but Recoup's code only ever reads. There is no code path in this app that creates, edits, or deletes anything in your books.

Messages and replies.The follow-up messages Recoup drafts, any edits you make, what was actually sent, and your customers' replies — including how our system classified those replies (for example, "promised to pay Friday").

Activity and security logs. A record of what the product did on your behalf (every send, pause, and payment detected) and standard security logs for staff access to our systems.

Call requests.If you use the "ask us to call you" form on our site, we keep the name and phone number you gave us, the exact consent wording you agreed to and when, and what came of the call. We use that number for the call you asked for — it doesn't go on a marketing or calling list, and we don't call it again uninvited.

To chase your invoices, Recoup processes contact details and payment history for the people and companies you invoice. We use that information only to do the job you hired us for — polite payment reminders on your behalf, from your identity. We never sell it, never market to your customers, and never contact them about anything other than your invoices. You're responsible for having the right to share your customers' contact details with us and to have us contact them on your behalf.

To run the service: find overdue invoices, draft and send reminders, track promises and payments, and show you what happened.

To make Recoup better at recovering money: we learn which tones, channels, and timing actually get invoices paid, and those learnings — as aggregated, de-identified signals — improve the defaults for every business on Recoup. We do not share your customer lists, message content, or account details with other customers.

When your customers pay through a Recoup payment link, the payment is processed by Stripe. Card and bank account numbers go directly to Stripe and never touch our servers.

Our staff can access customer data only through internal, read-only tooling, only when needed to operate, support, or debug the service — and every one of those accesses is logged. We share data with the service providers that run Recoup: cloud hosting and analytics (Vercel), our database provider (Supabase), Stripe for payments, our email and SMS delivery providers (Resend, Twilio), Anthropic — the AI provider that drafts messages and reads replies, which processes your customers' names, contact details, invoice amounts, and message history to do that — push-notification delivery (Expo), and Intuit for the QuickBooks connection. And no one else. We don't sell data to anyone, and we don't show ads.

We keep your data while your account is active so your audit trail and history stay intact. If you disconnect and want your data deleted, email us at hello@recoup-ai.com and we'll take care of it and confirm when it's done.

If we change this policy in a way that matters, we'll email you before the change takes effect — not bury it in a changelog.