DRAFT — for legal review before launch. Not legal advice.

Privacy Policy

Last updated: October 30, 2026

FilesDue ("we") provides a document collection service for professionals. This page explains what we collect and how we use it.

What we collect

• Account information: name, email, firm name, password hash.
• Billing information processed by Stripe when you subscribe (we do not store full card numbers).
• Usage data and audit logs (logins, uploads, downloads, request activity).
• Content you submit: request titles, notes, templates, and related settings.
• Client contact details you enter (name, email) to send document requests.
• Files uploaded by clients, stored encrypted until purged per your retention setting.

What we do not want

FilesDue is not designed for protected health information (PHI) or HIPAA-covered use. Do not upload medical records.

How we use your data

We use data to run and improve FilesDue, to train and improve AI models, and to create aggregated or de-identified data, which we may sell or license.

We may sell or share personal information with partners and other third parties (for example, data, analytics, and marketing partners), subject to the exclusions below and your choices.

Excluded Data: Documents uploaded by clients, and personal information of a customer's clients (names, emails, tax forms, IDs). FilesDue processes these only on the customer's instructions to provide the service; they are never sold, shared or used for AI training. Account and usage data of the professional are covered by the license, AI, aggregated-data, and sharing terms above, and only Aggregated Data may be derived from client records.

Retention

Completed request files are purged after your chosen retention period (default 90 days). Account data is kept while your account is active. After you delete your account, we stop using identifiable account data for new model training and sharing, as described in the Terms.

Service providers

We use trusted providers for hosting, email (for example Resend), and payments (Stripe). They process data only to provide their services to us. That is separate from any sale or sharing described above.

Your data and your choices

You can choose how we use certain information. These choices also cover the "sale" or "sharing" of personal information under US state privacy laws. We honor Global Privacy Control (GPC) signals as an opt-out of sale or sharing.

Client-uploaded documents and your clients' personal information are already excluded — they are never sold, shared, or used for AI training, with or without an opt-out.

You can also email hello@filesdue.com with the subject "Opt out".

Your rights

Depending on where you live (including California and other US states), you may have rights to access, delete, or correct personal information, and to opt out of sale or sharing. We will not discriminate against you for exercising these rights.

Contact

Questions or data requests: hello@filesdue.com. We reply within 2 business hours. FilesDue, 142 Joralemon Street, 6th Floor, Brooklyn, NY 11201. Signed, The FilesDue team.