SPSortedPay

Legal

Privacy Policy

Last updated: 1 August 2026

1. Who we are (data controller)

SortedPay is operated by Lucro Limited, a private company limited by shares registered in the Republic of Ireland.

In this policy, "SortedPay", "we", "our", and "us" mean Lucro Limited. Lucro Limited is the data controller for personal data processed through SortedPay.

2. What SortedPay is

SortedPay is invoice, reminder, and statutory late-payment tooling for freelancers and micro businesses in the United Kingdom, Northern Ireland, and Ireland (ROI).

3. What we collect

  • Account data (when auth is on): name, email, and authentication session data needed to sign you in.
  • Business and invoice data: business profile, bank details you enter, client names/emails, invoice lines, pay links, and reminder preferences.
  • Technical logs: IP address, user agent, and request path may appear in server logs for security and debugging.

4. How data is stored today

  • Browser workspace: invoice drafts and business profile are stored in your browser (localStorage), namespaced per signed-in user or local demo workspace so one identity does not see another's invoices on the same device.
  • Server auth (when enabled): account and session records may be stored in our database (Postgres or embedded PGLite during setup).
  • Email chase: client chase email is preview-only until a mail provider (e.g. Resend) is connected. We do not send client emails until that pipe is live.

5. Why we process data

  • Provide the SortedPay product (invoices, reminders, calculators)
  • Secure accounts and prevent abuse
  • Improve reliability and fix bugs
  • Meet legal obligations

Legal bases under GDPR include contract (providing the service you request), legitimate interests (security, product improvement), and consent where required.

6. Sharing

We do not sell your personal data. We may share data with:

  • Infrastructure hosts that run the service (e.g. VPS hosting in the EU)
  • Payment providers you choose when Pro billing is connected (e.g. Lemon Squeezy or Stripe)
  • Email delivery providers when chase email is enabled
  • Authorities when required by law

7. Retention

Browser data stays until you clear it or delete workspace data in the app. Account data is kept while your account is active. When you delete an account (or request deletion), we delete or anonymise personal data within 30 days unless law requires longer retention.

8. Your rights

If you are in the UK or EEA/EU, you may have rights to access, correct, delete, restrict, or port personal data, and to object to certain processing. Contact [email protected]. You may lodge a complaint with the Data Protection Commission (Ireland) at dataprotection.ie, or with your local supervisory authority.

9. Children

SortedPay is not directed at children under 16. We do not knowingly collect their data.

10. Changes

We will update this page when storage, email, billing, or auth change. The "Last updated" date will change. Material changes may also be notified in-product or by email when accounts are live.

11. Contact

Lucro Limited (CRO 811725)
Nicholastown, Kilcullen, Co. Kildare, R56 NT73, Ireland
[email protected]

See also Terms of use.