Legal

Privacy Policy

Payd — operated by Parrot Systems Ltd

This Privacy Policy explains how Parrot Systems Ltd ("Payd", "we", "us", "our"), a company registered in the United Kingdom, collects, uses, and protects personal data when you use getpayd.co.in and the Payd platform (the "Service").

1Who we are

Payd is operated by Parrot Systems Ltd, a UK-registered company. We are the data controller for personal data processed through the Service.

Contact: hello@getpayd.co.in

2What Payd is, in relation to your data

Payd is a payment intelligence and invoicing tool. We help Indian freelancers and agencies invoice UK clients and receive payment notifications. Payd does not hold, custody, or intermediate funds at any point. Payments are routed via Stripe Pay by Bank directly into the freelancer's own existing GBP virtual account held with Skydo or Xflow. We never have access to those funds.

3Data we collect

From freelancers (our direct customers)

• Name and email address (used for account creation and OTP login)
• UK GBP virtual account sort code and account number (the freelancer's own account at Skydo or Xflow - pasted in by the freelancer, used only to populate invoice payment routing)
• Invoice data created within the platform (line items, amounts, client details)
• Telegram chat ID (if the freelancer connects @PaydbuddyBot for notifications)
• Subscription and billing data via Stripe (plan tier, payment status - card details are held by Stripe, not by us)

From UK clients (the freelancer's customers)

• Name and email address, as entered by the freelancer when creating an invoice
• Payment status information arising from use of Stripe Pay by Bank to pay an invoice

We do not collect UK client bank account details directly. Payment authentication happens within the UK client's own banking app via Stripe's Open Banking integration.

Automatically collected

• Standard web log data (IP address, browser type, pages visited) via normal web server operation

4How we use this data

• To create and operate freelancer accounts (OTP-based login)
• To generate and send invoices on the freelancer's behalf to their UK clients
• To process payment notifications via Stripe webhooks
• To send payment reminder emails to UK clients on unpaid invoices (Day 7, 14, 21)
• To send Telegram notifications to freelancers (payment received, rate alerts)
• To operate subscription billing via Stripe
• To respond to support queries

We do not sell personal data. We do not use freelancer or client data for advertising purposes.

5Who we share data with

We share data with the following third-party processors, each acting under their own data processing terms:

We do not share data with Skydo or Xflow directly. The freelancer's sort code and account number are used only to populate the Stripe payment routing - Payd does not have a data-sharing integration with either provider in V1.

6Data retention

Invoice and transaction records retained for 6 years to align with UK tax record-keeping norms; account data retained for the life of the account plus a defined period after closure.

7International data transfers

Parrot Systems Ltd is UK-registered. Stripe, SendGrid, and Telegram may process data outside the UK.

Stripe — Stripe's Data Processing Agreement primarily relies on the UK/EU-US Data Privacy Framework, where Stripe self-certifies as the transfer mechanism. As a fallback, Stripe also incorporates the EEA Standard Contractual Clauses (Module 1 and Module 2) and the UK International Data Transfer Addendum, which apply automatically if Stripe's Data Privacy Framework certification is ever withdrawn or invalidated. Source: stripe.com/legal/dpa and stripe.com/legal/dta.

SendGrid (Twilio) — Twilio's Binding Corporate Rules, which cover most Twilio products, explicitly do not apply to SendGrid. For SendGrid specifically, Twilio relies on Standard Contractual Clauses to transfer personal data outside the EEA, UK, and Switzerland. For transfers specifically from the UK, Twilio's Data Protection Addendum incorporates the UK ICO's 2022 International Data Transfer Agreement (which replaced the earlier UK SCCs). Source: twilio.com/en-us/legal/data-protection-addendum.

Telegram (Bot API) — Telegram does not offer a data processing agreement or address international transfer mechanisms (such as SCCs) in its terms of service or privacy policy. Telegram's own privacy policy states that message data is stored on servers located globally. Telegram is built around an individual end-user relationship rather than an enterprise data processor relationship, so there is no formal transfer safeguard to point to for data passed through the Telegram Bot API. This is flagged as an open legal question, not a resolved one - it should be raised directly with a solicitor, since it may affect how much personal or sensitive data (e.g. invoice amounts, client names) is appropriate to send via Telegram notifications versus keeping such detail only in the web dashboard.

8Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to our legal retention obligations
• Object to or restrict certain processing
• Data portability
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, contact hello@getpayd.co.in.

9Security

We take reasonable technical and organisational measures to protect personal data. Payd does not store card details - these are held by Stripe directly.

10Children

The Service is not directed at, and is not intended for use by, anyone under 18.

11Changes to this policy

We may update this policy from time to time. Material changes will be notified to active users by email.

12Contact

Parrot Systems Ltd

Email: hello@getpayd.co.in

Registered address - Office 18220, 182-184 High Street North, East Ham, London E6 2JA

Companies house No. 15882100