SendDone
Privacy Policy
The short version. Your invoices and client list live on your iPhone and in your own iCloud, where we can't see them. Information reaches SendDone's server only when you use online payments, and then only what's needed to show an invoice, take a payment and keep the records the law and card networks expect. Card numbers go to Stripe, never to us. We don't sell data, show ads or use tracking.
This policy covers the SendDone iPhone app, the senddone.app website, and the invoice and card pages SendDone shows to the clients of businesses that use it. SendDone is published by Canyon Sky Rain LLC, a Utah limited liability company ("we" or "us"). "You" means a business that uses SendDone. "Your clients" means the people and businesses you invoice.
What stays on your device
Your business details, clients, invoices, line items, recurring schedules and payment records are stored in the app on your iPhone. If iCloud is turned on for SendDone, Apple syncs that data to your own private iCloud account so it can be restored on a new phone. That copy belongs to your iCloud account. We cannot see it, and Apple's privacy policy governs it.
Invoice PDFs are made on your device. When you text or email an invoice, it goes out through your own Messages or Mail app, to the people you choose.
What reaches SendDone's server
Nothing reaches our server unless you connect a Stripe account to take payments online. When you do, our server receives and stores only the following.
- Invoices you send a pay link for: your business name, the invoice number and dates, the line items and total, and your client's name and email address, so your client can view and pay the invoice.
- Payment records: the amount, payment method type, status, dates, the SendDone fee, and Stripe's reference numbers for each payment. These records contain no card or bank account numbers.
- Saved-card authorizations: when your client saves a card for future invoices, we record the exact terms they agreed to, their name and email address, when they agreed, the IP address and browser they used, the card brand, last four digits and expiry date, and any later cancellation. This record is evidence of your client's permission, which card networks and Stripe require.
- Your connection: your Stripe account ID, a security key for your iPhone (we store only a scrambled version of it), and, if you ever reconnect a phone, a one-time code sent to the email address on your Stripe account.
What Stripe handles
Payments are processed by Stripe through your own Stripe account. Card and bank details are entered on Stripe's secure pages and held by Stripe, not by us. Stripe's handling of that information is governed by Stripe's privacy policy. Stripe also keeps its own records of your payments in your Stripe account.
For clients who pay through SendDone
If a business sent you a SendDone link, that business is responsible for your invoice and your payment, and you should contact them with questions or refund requests. We keep the information described above so the business can be paid and so your payment and any card authorization can be confirmed later. You can cancel a saved-card authorization at any time using the link in your confirmation email or by contacting the business.
How long we keep it
| Record | Kept |
|---|---|
| Invoice copy behind a pay link | While unpaid, and for 180 days after its final status. After that, only the payment record remains. Deleted right away if you delete the invoice or disconnect Stripe. |
| Payment records | 7 years after the payment's last activity, for refunds, disputes and tax records |
| Saved-card authorizations | 7 years after the authorization ends |
| Stripe event notices | 90 days |
| Save-card links | Expire after 14 days or first use; deleted 30 days after that |
| Your data on your device and in your iCloud | Until you delete it |
What we don't do
- We don't sell or rent personal information.
- We don't use advertising, analytics or tracking in the app or on this website, and this website sets no cookies.
- We don't access your location, camera, photos, contacts or health data.
Stripe's checkout pages may use their own cookies to process payments and prevent fraud. Our hosting provider, Cloudflare, processes standard request information such as IP addresses to deliver and protect this website and our server.
Notifications
SendDone may ask permission to show notifications, such as "3 invoices are ready for November." These are created on your iPhone and contain no tracking.
Purchases
SendDone Pro is sold through the App Store. Apple processes the purchase, and we never receive your payment details for it.
Security
Our server's connection to Stripe uses keys that never leave the server. Pay links and card links use long random addresses that can't be guessed. Data travels over encrypted connections.
Your choices
- Export all your records from the app at any time.
- Delete invoices or clients in the app. Deleting an invoice also deletes its pay-link copy from our server.
- Disconnect Stripe in the app to stop new links and charges and delete unpaid invoice copies.
- Ask us what we hold about you, or ask us to delete it, by emailing senddone@canyonskyrain.com. Payment and authorization records we must keep for legal, tax or dispute reasons are kept for the periods above.
Children
SendDone is a business tool and is not directed at children under 13. We do not knowingly collect information from children.
Changes
If this policy changes, we'll update the effective date above, and for significant changes we'll give notice in the app or on this website.
Contact
Canyon Sky Rain LLC
Email: senddone@canyonskyrain.com