Privacy Policy

Last updated: 10 November 2026

1. Who we are (controller identity)

Sairon Romeika, sole proprietor, trading as Stop Chasing Invoices, Briedziu takas 21, Kaunas, 49100, Lithuania (registered under number Sole proprietor, no registered company), contact sairon@stopchasinginvoices.com. For the personal data of our customers' clients and contacts that we process on a customer's behalf, the customer is the controller and we are the processor. For our own website, sales outreach, prospect and billing data, we are the controller.

2. What we process

• Customer account data: name, business email, company, billing details.
• Invoice data you send us (CSV export): invoice numbers, amounts, due dates, payment status, and your customers' business contact names and email addresses. We receive only what you choose to include in the file. The free sample does not need customer email addresses, so we automatically discard any email-address columns when a file arrives and delete the original file. If we later need recipient addresses to send reminders in the pilot, we will ask for them separately. We have no login to your accounting system.
• Correspondence: reminder emails we prepare in your name, your approvals, and any replies passed to us or to you.
• Prospect and business-contact data: business contact details (name, work email, job title, company) of people we contact about our own service, taken from public business sources or the recipient's own website. See section 3.
• Website data: the site uses no analytics or tracking scripts. Our hosting provider (GitHub Pages (GitHub, Inc.)) may keep standard server logs.

3. How we use it, and legal bases

To provide the audit and follow-up service you asked for, to bill you, to market our own service to business contacts, and to meet legal obligations. Legal bases: contract; legitimate interests (business-to-business marketing to relevant business contacts, with an easy opt-out); legal obligation.

If we emailed you about our service: we got your business contact details from the agency's own public website and public business listings. We keep them only to contact you and to remember that you opted out. You can tell us to stop at any time by replying "stop" or using the link in the email; we then keep only your email address on a suppression list so we do not contact you again. You may also object to our processing and ask for access or deletion (section 10).

4. Access to your accounting system

At present we do not connect to your accounting system; we work only from files you send us. An optional read-only connection to QuickBooks or Xero is planned for the future. If it is launched, it will be optional, you will be told what it reads, you can revoke it at any time from your accounting provider, and this policy will be updated before it is used.

5. No sale of data; no model training

We do not sell or rent personal data. We do not use customer data, or the data of customers' clients, to train or fine-tune AI or machine learning models, and we only use model providers whose terms prohibit them from doing so with our inputs.

6. Sub-processors and service providers

We use service providers to host data, send email and draft messages: Zoho Mail (email), Google (meeting links), GitHub (website hosting), Cloudflare (DNS). We will give notice of changes. We rely on each provider's standard data processing terms.

7. Data processing basics (customer as controller)

We process customers' clients' data only on documented instructions from the customer, keep it confidential, apply appropriate technical and organisational measures, assist with data-subject requests, notify the customer without undue delay of a personal-data breach, and delete or return data at the end of the service. A full Data Processing Addendum is available on request from sairon@stopchasinginvoices.com.

8. Retention and deletion

You can ask us at any time to delete your CSV files and everything we derived from them; we will do so within 7 days of the request. If you do not proceed after the free audit we delete the CSV within 30 days. While the service is active we keep data as needed to run it, and we delete it within 90 days after termination, except what law requires us to keep (for example billing records). Opt-out records (email address only) are kept so that we honour them.

9. International transfers

The operator is established in the EU, so the GDPR applies to our processing. Data may be processed outside the EU/EEA, including in the United States. Where a provider is in a country without an EU adequacy decision we rely on safeguards such as Standard Contractual Clauses, or on the provider's certification under the EU-US Data Privacy Framework where applicable. Data you send us from the United States is sent to us in the EU/EEA, and may be sent back to US providers.

10. Your rights

Depending on where you live (EU/EEA: GDPR; some US states, for example California), you may request access, correction, deletion, restriction, portability, or object to processing, and lodge a complaint with a supervisory authority (for example the State Data Protection Inspectorate of Lithuania (VDAI)). Contact sairon@stopchasinginvoices.com. We will respond within the legal deadline (one month under GDPR). If you are a customer's client, please contact the customer too.

11. Security

We use measures such as encryption in transit, access controls, and keeping files only in the systems listed above. We do not currently hold third-party security certifications. No system is perfectly secure.

12. Changes

We will post updates here and update the date above.