1. Overview
This Privacy Policy describes how Lazy Pay LLC ("LazyPay," "we," "us," or "our") collects, uses, and shares personal information when you use our websites, applications, and services (collectively, the "Service"). LazyPay helps small businesses ("Merchants") send payment requests and automated payment reminders to their customers ("Clients") by text message and email, and collect payment through integrated payment methods.
This Policy covers three groups of people:
- Merchants — business owners who create a LazyPay account;
- Clients — people a Merchant asks us to contact about a payment; and
- Visitors — anyone browsing our website or joining our early-access waitlist.
2. Information we collect
Information Merchants provide
- Account information: your name, email address, and password (stored in hashed form by our authentication provider), or credentials from a sign-in provider such as Google or Apple.
- Business profile: business name, logo, payment preferences (e.g., a Venmo handle), default payment terms, and notification preferences.
- Client information you upload: your Clients' names, company names, email addresses, and mobile phone numbers, together with invoice details (amounts, descriptions, dates, and payment terms). You control this information; we process it on your behalf to provide the Service (see Section 4).
- Billing information: your subscription is billed through Stripe. LazyPay never stores your full card number.
Information Clients provide
- Payment information: when a Client pays through a LazyPay payment page, the card or bank details are collected and processed directly by Stripe, our payment processor. LazyPay receives only confirmation data (e.g., amount, method, and payment status) — never full card numbers.
- Self-reported payments: if a Client tells us they paid outside the Service (e.g., Venmo, cash, or check), we record what they report so reminders stop.
Information Visitors provide
- Waitlist information: if you join our early-access waitlist, we collect your name, email address, and — only if you choose to provide it and check the SMS consent box — your mobile phone number and your consent record.
Information collected automatically
- Usage and log data: IP address, browser type, pages viewed, and timestamps, used for security, debugging, and service improvement.
- Message delivery data: whether reminders were sent, delivered, or failed, and whether payment links were used.
- Cookies: we use strictly necessary cookies to keep Merchants signed in and to remember interface preferences (such as dark mode). We do not use third-party advertising cookies.
3. How we use information
- To provide the Service: sending payment requests and reminders by SMS and email, processing payments, detecting when payments land, and stopping reminders when they do;
- To manage subscriptions and billing, including our usage-based automatic plan adjustment (we count the unique Clients you contact each month);
- To notify Merchants about activity in their account (e.g., "you got paid");
- To send early-access and launch communications to waitlist members who opted in;
- To secure, maintain, troubleshoot, and improve the Service;
- To comply with law, enforce our Terms of Service, and prevent fraud or abuse.
We do not use Client contact information for our own marketing. Clients are contacted only about payments owed to the Merchant who added them, and — where they have separately opted in — service messages they have requested.
4. Our role in processing Client data
For Client information uploaded by a Merchant, the Merchant is the party who decides whom to contact and why; LazyPay processes that information on the Merchant's behalf to deliver the Service. Merchants are responsible for having an appropriate basis to share their Clients' contact information with us — including any consent required to contact a Client by text message. Clients with questions about why they were contacted should start with the business that sent the request; we're happy to help too at privacy@lazypay.com.
5. How we share information
We share personal information only with the service providers ("processors") we need to run LazyPay, under contracts that limit their use of the information to providing services to us:
| Provider | Purpose | What they process |
|---|---|---|
| Stripe | Payment processing and subscription billing | Payment card / bank details (collected directly by Stripe), amounts, payer and Merchant identifiers |
| Twilio | SMS delivery | Recipient phone numbers and message content |
| Resend | Email delivery | Recipient email addresses and message content |
| Supabase | Database, authentication, and hosting infrastructure | Account, business, Client, and request records |
We may also disclose information: (a) to comply with a law, regulation, subpoena, or court order; (b) to protect the rights, safety, or property of LazyPay, our users, or others; (c) in connection with a merger, acquisition, or sale of assets, in which case this Policy will continue to apply to your information; or (d) with your direction or consent.
6. SMS communications
SMS messages are sent through our messaging provider, Twilio. Message frequency varies. Message and data rates may apply. Any SMS recipient can opt out at any time by replying STOP, or get assistance by replying HELP. Full details — including sample messages and opt-in descriptions — are in our Messaging Terms.
7. Data retention
- Merchant accounts: we retain account and business records while your account is active. When you close your account, we delete or de-identify personal information within 90 days, except records we must keep for legal, tax, accounting, or fraud-prevention purposes.
- Client and payment records: retained while the associated Merchant account is active, because they are the Merchant's business records (payment history, receipts, reminder logs). Merchants can delete Client records at any time from within the Service.
- Waitlist records: retained until launch communications conclude or you ask us to remove you, whichever comes first.
- SMS consent records: retained as required to demonstrate compliance with messaging regulations, even after opt-out.
8. Security
We protect personal information with industry-standard measures: encryption in transit (TLS) and at rest, hashed passwords, row-level access controls in our database, role-restricted API keys, and least-privilege access for our staff. Payment card data is handled exclusively by Stripe, a PCI-DSS Level 1 certified processor. No method of transmission or storage is 100% secure, but we work to protect your information and will notify affected users and regulators of any breach as required by law.
9. Your rights and choices
- Access, correction, deletion: you may request a copy of, correction of, or deletion of your personal information by emailing privacy@lazypay.com. Merchants can edit most information directly in the app.
- SMS opt-out: reply STOP to any LazyPay text message.
- Email opt-out: marketing and early-access emails include an unsubscribe link. Transactional emails (e.g., payment requests) are controlled by the Merchant who initiated them.
- State privacy rights (US): depending on your state (including California, Colorado, Connecticut, Texas, Utah, and Virginia), you may have the right to know, access, correct, delete, or obtain a portable copy of your personal information, and the right not to be discriminated against for exercising these rights. Because we do not sell personal information or use it for targeted advertising, there is nothing to opt out of on that front. To exercise any right, contact privacy@lazypay.com; we will verify your request and respond within the time required by law. You may use an authorized agent where the law allows.
If a Client asks us to delete information that a Merchant controls (for example, an invoice record), we will refer the request to the Merchant where the law permits, since those are the Merchant's business records.
10. Children
The Service is for business use and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.
11. International users
LazyPay is operated from the United States and is currently intended for US businesses. If you access the Service from outside the US, you understand that your information will be processed in the US, where privacy laws may differ from those in your jurisdiction.
12. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will notify Merchants by email or in-app notice and update the "Last updated" date above. Your continued use of the Service after changes take effect means you accept the updated Policy.
13. Contact us
Questions or requests about privacy:
- Email: privacy@lazypay.com
- Support: support@lazypay.com
- Mail: Lazy Pay LLC, Attn: Privacy, PO Box 2, Centerville, UT 84014