Privacy policy

Last updated September 2026

Babara helps freelancers and small businesses follow up on unpaid invoices. Babara is operated by Mahmoud Shayeb, an individual (sole trader), who is the data controller for your account data. This policy explains what we collect, why, and the choices you have.

What we collect

• Account data: your name, email, business name and timezone. We don’t use passwords; you sign in with one-time email links.
• Invoice data you add: client names and billing emails, invoice numbers, amounts, dates and your payment link or bank details.
• Email activity: whether reminder emails were opened (via a tracking pixel) and whether the pay page was visited or its buttons used.
• Client responses: promised payment dates, “already paid” notes and questions your clients send through the pay page.

How we use it

Only to run Babara for you: sending reminders on your behalf, showing you what happened, estimating when invoices will be paid, and keeping the service secure. We never sell data and never use your clients’ details for our own marketing.

Payments

Your clients pay you directly through your own payment link or bank details; Babara never touches that money. Babara subscriptions are sold and processed by Paddle.com as Merchant of Record; we never see or store card numbers.

Cookies

We use a single, essential session cookie to keep you logged in. No advertising cookies.

Service providers

We use trusted providers: Cloudflare (hosting and database), Resend (email delivery) and Paddle (subscription billing), each bound by their data processing terms.

Retention & deletion

You can delete your account at any time from Settings; this permanently removes your clients, invoices and email history.

Your rights

You can access, correct, export or delete your data. Contact us at privacy@babara.app.