Privacy Policy

PaidParrot is operated by PaidParrot (Miri, Sarawak, Malaysia) ("we"). This policy explains what data we handle when you connect PaidParrot to Xero, and what we do with it.

What we access

When you connect Xero, you give us read-only access to:

• Your Xero organisation name
• Your unpaid sales invoices: invoice number, amount due, currency and due date
• The name and email address of the customer on each unpaid invoice
• Your name and email address from your Xero login

We cannot create, change or delete anything in your Xero account.

What we store

• Your reminder settings, such as your business name, reply-to address and email wording
• The access tokens Xero gives us, so reminders can run each day without you logging in
• A log of each reminder we send: invoice number, recipient email address, subject, message and time sent

We read invoice details from Xero each time reminders run. We do not keep a separate copy of your invoices.

How we use it

Only to send the payment reminders you have set up and to show you their status. We do not sell your data, use it for advertising, or use it to train artificial intelligence models.

Who we share it with

We use a small number of service providers to run PaidParrot:

• Xero, where your invoice data comes from
• Our email delivery provider, which sends reminder emails on your behalf
• Paddle.com, our reseller and Merchant of Record, which processes subscription payments. We never see your card details.
• Our hosting provider, which runs the website and stores the data above

How long we keep it

We keep your data while your account is active. If you disconnect PaidParrot or ask us to close your account, we delete your settings, tokens and reminder log within 30 days. You can also disconnect PaidParrot at any time from the Connected Apps page in Xero.

Your rights

You can ask to see, correct or delete the data we hold about you. Customers who receive a reminder can contact the business that issued the invoice, or us.

Security

Access to Xero is read-only and uses Xero's standard secure sign-in (OAuth 2.0). Data is sent over encrypted connections, and access to our systems is restricted.

Contact

Questions or requests: hello@paidparrot.com. We handle personal data in line with Malaysia's Personal Data Protection Act 2010.