Privacy policy

Last updated 16 October 2026

PayeeGuard is operated by Shubhankar Sharma, a sole proprietor based in India ("we"). This policy explains what we collect and why.

The free email check

The email you paste is sent to our server, checked, and discarded. We don't store it. To check domains we look up public DNS records and public registration data (RDAP) for the sender's domain. We keep a temporary per-IP counter to prevent abuse.

Accounts

• Your login: name, email, a hash of your password, and team membership.
• Your payees: names, contact details and notes you enter or import; bank details as described below.
• Bank details: full numbers encrypted only while a change is being verified and for a window after approval (30 days by default), then deleted automatically. After that we keep the last 4 digits and a keyed fingerprint that can't be reversed.
• Audit log: what was done, by whom and when, including call-back notes. It is kept while your account exists, because its purpose is to be a lasting record.
• Accounting connections: if you connect Xero or QuickBooks, we read supplier names, emails and bank details, and store encrypted access tokens.
• Secure link submissions: what the payee enters, plus their IP address, country and browser type, recorded as evidence.

Who we share it with

Cloudflare (hosting and storage), Resend (sending account emails, if enabled), our payment provider (billing, if you subscribe), and Xero or Intuit when you connect them. We don't sell personal data or use advertising trackers.

Your rights

You can export your audit log, and delete your account and all its data from Settings at any time. Payees whose details you hold can contact you, or us at hello@disputekits.com. Under India's DPDP Act, the GDPR or the UK GDPR you may have rights to access, correct and erase data; write to us and we'll respond within 30 days.

Contact and grievance officer

Shubhankar Sharma, hello@disputekits.com.