Privacy Policy

Effective date: July 14, 2026

The short version

You forward us your commission reports so we can analyze them for you. That data is yours. We use it only to run RbA Pay for your account, we never sell it, and nobody else can see it.

What we collect

Account information: your name, email address, and password (stored as a secure hash, never in plain text).

Commission report data: the report PDFs you forward to your personal ingestion address and the structured data we extract from them, including customer names, job numbers, contract amounts, commission amounts, and payment dates.

Billing information: your subscription status and payment history. Card details are collected and stored by Stripe, our payment processor. They never touch our servers.

Basic usage information: log data such as sign-in times and feature usage that helps us keep the service reliable and secure.

How we use it

We use your data to provide the service you are paying for: parsing your reports, detecting discrepancies, forecasting your paychecks, sending you analysis emails, and showing your dashboard. We also use it to respond to your support requests and to protect the service from abuse.

We do not sell your data. We do not share it with advertisers.

Service providers we rely on

RbA Pay runs on a small set of infrastructure providers that process data on our behalf: Supabase (database and authentication), Vercel (hosting), Anthropic (AI report parsing and text generation), Postmark (sending and receiving email), and Stripe (payments). Each receives only what it needs to do its job.

How your data is protected

Data is encrypted in transit and at rest. Your records are isolated to your account with database-level row security, which means even a signed-in user of the service can only ever read their own rows. Access to production systems is limited and credential-protected.

Retention and deletion

We keep your reports and extracted data while your account is active so your history, forecasts, and dashboard keep working. If you cancel, your data stays available in case you return. If you want it gone, email us and we will delete your account and all associated data within 30 days.

Your rights

You can access, correct, export, or delete your personal data at any time by using the product or by emailing us. Depending on where you live, you may have additional rights under laws such as the CCPA; we honor reasonable requests regardless of jurisdiction.

Changes and contact

If this policy changes in a meaningful way, we will email you before the change takes effect. Questions or requests: contact us at support@rbapay.com.