Privacy policy

What changed: Following a seller now starts with one email to confirm the address, and addresses never confirmed are cleared after 7 days.

The short version

We collect what it takes to write your bills, run your pay page and get you paid. We do not sell your data or your customers’ data, we do not market to your customers, and we never see or store a card number.

Some of what you give us is meant to be seen. Your pay page, and the payment details you put on it, can be read by anybody who opens it, and a bill can be read by anybody who has its link. The sections below say exactly what that covers.

Who we are

PayBrisk is operated by Ezekiel Madrigal. Ezekiel Madrigal is responsible for the personal data described here. Write to support@paybrisk.app about anything on this page.

Your data and your customers’ data are treated differently. For your own account we decide what is collected and why, so we are responsible for it (the “controller”). For the details of your customers that you put into PayBrisk, or that they type on your page, you decide why they are collected and we handle them only to run the service for you (we are your “processor” or “service provider”). We do not use your customers’ details for anything of our own.

What we collect from you

• Your email address, because it is how you sign in and how we reach you about your account. Receipts and reminders we send your customers use it as the reply-to address, so their replies come to you. If you have set neither a business name nor a pay page address, it is also the name your bills are sent under.
• Your business name and logo, which appear on your bills, receipts and pay page. Your logo is stored with our hosting provider and deleted from there when you remove or replace it.
• Your pay page: the address you claim at paybrisk.app/yourname, the tagline under your name, and the line your customer reads after paying. Addresses you used before are kept so that old links and printed signs still reach you and nobody else can take them.
• How you get paid: your Cash App, Zelle, Venmo or PayPal handle, your Square link, and whether you take cash. These are printed on every bill you send and on your pay page, often as a QR code. A Zelle handle is usually an email address or a phone number, and anybody who opens the page can read it.
• Your settings: your sales tax rate, whether you accept tips, how your QR codes look, and your saved items with their prices.
• Your bills and sales: the customer name and contact detail you type, line items, notes, due dates, tax, tips, totals, whether each one is paid and how, and the cash and other sales you record yourself.
• If you connected Stripe before PayBrisk became free: its identifier, whether it can take cards and Cash App Pay, and what Stripe is still waiting on from you. If you paid for Pro, we also keep the identifiers of your Stripe subscription. We never receive your Stripe login or your bank details.
• Your market day: where you will be next and on what day, which shows on your public page; any market page you make, which lists the stalls on it by name and links to their pages; and whether you list yourself on one.
• Keeping your account safe: if you turn on two-step verification, the secret your authenticator app uses and your backup codes (scrambled, so we cannot read the codes back). When a sign-in fails, is rate limited or fails the bot check, we record what happened, when and the network address it came from.
• If you sign in with Google, where that is offered, Google tells us your email address and your Google account identifier. We use nothing else from your Google account.

What we collect about the people who pay you

Your customers never sign up for PayBrisk, but some of their details pass through it.

• From you: the name and the phone number or email address you put on a bill. You are responsible for having a reason to hold them.
• From your customer, on your pay page: the name, amount and note they type, the items they pick and any tip. That becomes a bill in your history like any other.
• From your customer, on your page’s menu: the items and quantities they pick, which app they say they paid with and, if they choose to give it, their name. If you take pre-orders, also the phone number or email address they give for pickup and the day they will collect. Each becomes an order on your dashboard, marked as waiting until you check the money arrived.
• From your customer, if they ask to hear where you’ll be next: their email address. We email it only when you save a new market day, and every email has a link that deletes it. You see how many people asked, not who.
• When a customer says they have paid another way, using the “Already sent it?” form on a bill: when they said so, and which of your payment methods they picked. We pass that on to you. It is recorded as a claim, not as a payment.

We use these details to show the bill, to send the emails described below, and to help you tell one bill from another. We never use them for anything else, and never to market to anybody.

What we never collect

Card numbers, bank details and app logins never reach PayBrisk. Money sent by cash, Zelle, Venmo, Cash App, PayPal or Square goes through that app or hand to hand, and never passes through PayBrisk at all.

The emails we send

• To you: sign-in links, and a message when a customer says they have paid you.
• To your customers, in your name: one receipt when a bill is paid, and at most two reminders about a bill that is still unpaid. Reminders go only to an email address on the bill, so a bill with only a phone number is never chased, and every reminder has a link that stops any more about that bill. The receipt goes to the email on the bill. We do not send text messages.
• To customers who asked to follow you: first one email asking them to confirm the address is theirs, and nothing more unless they do. Then an email when you post where you will be next, at most three a day. Each has a stop link, which also works as one-click unsubscribe in their mail app, and pressing it deletes their address.

We send no newsletters or marketing email to you or to your customers. Some email to you is optional (a customer says they have paid; a customer accepts a quote; old records are about to be cleared), and every one of those has a link at the bottom to turn it off, and a switch in your account settings. Sign-in links, receipts and notices about your plan or these policies are needed to run your account, so they cannot be turned off.

The closing sheet can prepare a sales report for your market manager. It opens in your own email app and is sent from your address, not ours; we only remember the manager’s address on your phone.

Who can see it

• Anyone who opens your pay page sees your name, logo, tagline, the payment details you listed and, if you have them, your saved items and prices. We ask search engines not to list the page, but that does not make it private.
• Anyone who has a bill’s link sees that bill: your name and payment details, the customer’s name, the lines, the total and whether it has been paid.
• An app that sent you to PayBrisk with a bill already filled in can later ask whether that bill was paid, when, and for how much. So can anyone else who has the bill’s number. Nothing else about the bill is given out that way.
• PayBrisk’s own operators can see your email address, business name, plan and whether a bill is paid, to give support, stop abuse and enforce the terms. They cannot see your takings, the amounts on your bills, your customers’ names or contact details, or your security settings: those screens are hidden from staff. An operator can look at your dashboard as you see it, for up to 30 minutes at a time, only to help you, without being able to change anything and with the same parts hidden. Every such view and every change an operator makes is logged, along with the operator’s own network address and browser.
• The services that run PayBrisk: Vercel for hosting and storing logos; Supabase for the database; Resend for email; Cloudflare Turnstile, when it is switched on, to check that a sign-in comes from a person and not a bot (it sees your browser and network address); and Google if you sign in with it. Each works under its own privacy policy, and we share only what it needs to do its job.

We may also disclose information where the law requires it, to protect somebody from harm or fraud, or to whoever takes over PayBrisk if it is ever sold, who would have to keep to this policy.

Where it is stored and how it is protected

Your data is stored by the providers above, in the United States. Connections to the site are encrypted, the database is closed to everything but the app, and staff accounts must use two-step verification. No system is perfectly secure; if something goes wrong that puts your data at risk, we will tell you as the law requires.

How long we keep it

• Your account, settings, page, items and payment details: Until you delete your account.
• Your bills, sales and orders: Until you delete them or your account.
• Your customers' names and phone numbers or emails on orders and pre-orders: 12 months after the sale, then cleared automatically (you get an email a week before).
• Email addresses of customers who asked to hear where a seller will be next: Until they press stop in any of those emails, or the seller deletes their account. Addresses never confirmed are cleared after 7 days.
• Files you upload (your logo): Until you replace or remove them; replaced files are cleared within a day.
• Sign-in links: 15 minutes, then cleared.
• Signed-in sessions: 30 days after last use, then cleared.
• Failed sign-in records, with network address: 90 days.
• Privacy requests: 24 months after we close them.
• Our staff's audit log, with their network address: 2 years.
• Paid plan billing records (agreed, started, canceled): 4 years, even after you delete your account, because the law requires it.
• Email we already sent: In the recipient's inbox; our mail provider keeps delivery logs for about 30 days.
• Hosting request logs, with network address: Kept by our hosting provider for a short time under its own policy.

A recorded sale you remove, or a bill we cancel, leaves your history and totals but the record is kept with your account.

Your network address is used to slow down anybody sending too many requests. We hold it in memory for up to an hour and never store it with your account; our hosting provider keeps ordinary request logs, which include it.

You can delete your account yourself, at the bottom of your dashboard. It happens straight away and cannot be undone: your account, your bills, orders and recorded sales (with the customer names, phone numbers and email addresses on them), your saved items, your logo and your settings are erased, every pay link you sent and your pay page stop working, and no more email goes out in your name. A Pro plan, if you ever paid for one, is canceled at the same moment.

A few things are kept, each for a reason. Your pay page address is retired rather than released, so nobody else can take it; we keep the address and the date and nothing else about you. We keep the billing records of any Pro plan and of any fees we took, because the law requires them. Our log of what our own staff did on accounts is never edited. Email we already sent stays in the inboxes it went to. Database backups roll off on their own schedule. A Stripe account you connected is yours and is not affected; Stripe keeps its own records of your payments under its own policy.

Cookies and your device

PayBrisk sets only the cookies it needs to work, such as the one that keeps you signed in, plus one optional cookie that remembers which “Powered by PayBrisk” link or flyer brought you here, and only if you say yes. Your phone also keeps a few things for you, such as a cart for up to two hours, sales made without signal until they send, and your market manager’s email address. We run no advertising, no analytics and no tracking pixels. Every cookie and stored item, and how long each lasts, is in the cookie policy.

Your choices

• Change or remove your payment details, logo, page, items and market listings from your dashboard.
• Turn optional email off with the link at the bottom of it, or under Emails in account settings.
• Download my data gives you a copy of everything in your account, in a file you can open or take elsewhere.
• Delete your account at any time, from the bottom of your dashboard.

If you are somebody’s customer and want to know what a bill or order says about you, you can ask the seller, since it is their record, or ask us using the form below and we will pass it on or help.

Your privacy rights

Wherever you live, you can ask us to:

• tell you what personal information we hold about you, where it came from, why we use it and who we share it with;
• send you a copy of it in a form you can take elsewhere;
• correct it if it is wrong;
• delete it.

Send a privacy request, or write to support@paybrisk.app. You can also ask somebody else to make a request for you, with your written permission. To make sure we only hand your data to you, we reply to the address you gave and may ask you to confirm it is yours. We answer within 45 days; if we need longer, we will tell you why within that time. Asking costs nothing and will not change how we treat you. If we turn a request down, we will say why, and you can ask us to look at it again by replying.

State privacy notice

Several US states give their residents privacy rights by law. We give the rights above to everybody, in every state, and this section adds what those laws ask us to say.

• We do not sell or share personal information, as those laws use the words, we do not use it for targeted advertising, and we do not profile anybody to make decisions about them. So there is nothing to opt out of. We still honor Global Privacy Control and Do Not Track: when your browser sends either, we treat it as a no to the optional cookie.
• We do not collect sensitive personal information, such as a government ID, precise location, health details or card numbers.
• In the last 12 months we collected identifiers (names, email addresses, phone numbers, payment app handles, and network addresses), commercial information (bills, orders, sales and whether they were paid) and internet activity limited to sign-in security records, from you, from the sellers who billed you, and from the services named above. We used them only for the purposes on this page, disclosed them only to those services, and keep them for the periods in the section on keeping it.
• If we turn down a request and your state lets you appeal, reply to our answer with “appeal” and someone who did not make the first decision will look at it and answer within 45 days. If you are still unhappy, you can contact your state attorney general.

If you are in the UK or European Union

PayBrisk is built for sellers in the United States, but if UK or EU data protection law applies to you, here is what it asks us to say. We use your account data because we need it to provide the service you signed up for (contract), to keep the service safe and to know which links bring people here (our legitimate interests), with your consent for the optional cookie, and to keep records the law requires (legal obligation). On top of the rights above, you can object to how we use your data, ask us to restrict it, and withdraw consent at any time. Your data is stored in the United States. You can complain to your local data protection authority, though we would like the chance to put things right first.

Age

PayBrisk is only for people who are 18 or older, and everyone who makes an account confirms it. We do not knowingly collect information from children, and we delete it if we learn we have.

Changes

When this policy changes, the date at the top changes and the “What changed” line says how. If a change affects your rights or how we use your data, you will see a notice in your dashboard and we may email you before it takes effect. Anything you want explained first is welcome on the contact page.