OwedWell Privacy Policy

1.Information We Collect

Website visitors and prospective customers

We may collect names, company information, business email addresses, phone numbers when provided, trade or industry, and information submitted through early-access, contact, or demonstration forms.

Organizations and Authorized Users

When an Authorized User creates or uses an account, we may process:

• Name and business contact information
• Organization name
• Role and permissions
• Authentication and security information
• Organization settings and preferences

Customer Data supplied by an Organization

An Organization may upload or connect information used to manage accounts receivable, including:

• Customer or payer names and business contact information
• Invoice numbers, dates, due dates, balances, and payment status
• Account notes and status
• Customer communications and replies
• Payment promises, disputes, and workflow information
• Payment links supplied or authorized by the Organization

OwedWell generally processes this Customer Data on the Organization’s behalf. The current workflow does not require credit-card numbers or banking credentials to be stored in OwedWell.

Connected services

When an Organization connects an approved integration, we receive information authorized by the Organization and the connected provider’s permissions.

Usage and technical information

• IP address and browser or device information
• Pages and features used
• Authentication activity
• Application errors and service performance
• Internal identifiers
• Security and audit events

We design analytics and monitoring to avoid unnecessary invoice content, message content, payment links, authentication tokens, or other customer-sensitive content.

2.How We Use Information

• Provide, operate, and secure the Service
• Authenticate Authorized Users and manage Organization permissions
• Import and organize accounts receivable
• Generate recovery workflows and recommendations
• Prepare AI-assisted drafts and classify responses
• Track tasks, promises, disputes, replies, and payment verification
• Provide support and administer billing
• Maintain audit records, monitor reliability, and improve the Service
• Communicate about accounts and material service changes
• Meet applicable legal obligations

3.AI-Assisted Features

OwedWell may use artificial intelligence to draft communications, summarize account context, classify responses, prioritize work, and suggest permitted next actions. AI output may be incomplete or inaccurate.

Material customer-facing actions remain subject to the Organization’s configured workflow and human review where required. We seek to provide AI vendors only the information reasonably necessary for the requested function.

OwedWell does not use Customer Data to train general-purpose AI models unless the Organization expressly authorizes that use or OwedWell separately discloses it and obtains any required permission.

Organizations remain responsible for reviewing AI-assisted output and deciding whether it is appropriate for their business and circumstances.

4.How We Disclose Information

We may disclose information to service providers that help operate the Service, including hosting, database, authentication, email delivery, AI processing, monitoring, analytics, billing, and support providers. Our current maintained list is available on the Subprocessors page.

We may also disclose information when required by law, to protect OwedWell or others, in connection with a business transaction, or at the direction or with the consent of an Authorized User or Organization.

5.Contractor-Controlled Integrations

Organizations may connect third-party email, accounting, field-service, payment, or communication systems. Information may be exchanged according to the permissions authorized by the Organization and the third party’s terms and privacy practices.

6.Communications and Suppression Controls

Organizations determine which accounts and recipients may receive accounts-receivable communications. OwedWell supports approval, suppression, dispute, contact-correction, and workflow controls intended to help Organizations prevent or pause inappropriate outreach. Organizations remain responsible for their communication policies and legal obligations.

7.Hosted Sender Identity

OwedWell may send account, security, invitation, or other service messages using an OwedWell-controlled sender identity. Customer-facing accounts-receivable messages use the Organization’s configured communication provider unless a separately disclosed and approved test or service workflow applies.

8.Data Security

OwedWell uses administrative, technical, and organizational safeguards designed to protect information, which may include:

• Encrypted network transmission
• Multi-factor authentication for privileged administration
• Tenant isolation and server-side authorization
• Role-based access controls
• Audit logging and secret-management controls
• Monitoring, error detection, backups, and recovery procedures

No security method can guarantee absolute security.

9.Data Retention

We retain account, Customer Data, security, audit, billing, and support records for as long as reasonably necessary for the purpose collected, to provide the Service, maintain legitimate business and security records, satisfy legal obligations, resolve disputes, and enforce agreements. Retention may vary by record type, Organization configuration, contractual requirements, and legal obligations.

A final retention schedule will be established before real customer onboarding. Where supported, Organizations may request export or deletion subject to applicable retention obligations.

10.Organization Responsibilities

Organizations determine what Customer Data they provide and how they use the Service. Each Organization is responsible for having appropriate authority to provide and use Customer Data and to communicate with its customers through connected systems.

11.Privacy Rights and Requests

Depending on location and applicable law, a person may have rights concerning personal information, including access, correction, deletion, information about processing, objection, or restriction.

Requests may be emailed to hello@owedwell.com. Please describe the request and the Organization involved. We may verify identity and authority before acting. Some records may be exempt or retained where permitted by law.

12.Service Provider or Processor Role

When OwedWell processes Customer Data in an Organization’s accounts-receivable portfolio on that Organization’s behalf, the Organization generally determines the business purpose and use. OwedWell may act as a service provider, processor, or similar role depending on applicable law and circumstances.

13.Cookies and Analytics

OwedWell may use cookies or similar technologies required for authentication, security, preferences, and Service operation. Privacy-conscious analytics may be used to understand product usage and reliability.

OwedWell does not sell customer invoice portfolios or customer communication content as a data-broker business model. Whether a particular activity is legally considered a “sale” or “share” depends on applicable law and the activity involved.

14.Children’s Privacy

OwedWell is a business service and is not directed to children. We do not knowingly collect personal information directly from children through the OwedWell account service.

15.Changes to This Policy

We may update this Privacy Policy from time to time. When appropriate, we will update the effective date and provide additional notice of material changes.

16.Contact

Privacy questions and requests may be directed to: