Privacy
Privacy Policy
Last updated: 28 October 2026
This policy explains how PayPathIQ Limited handles personal data. If you received a payment reminder, invoice notice, or payment link from a business that uses PayPathIQ, start with If a business contacted you through PayPathIQ.
Who we are
PayPathIQ is business-to-business software for billing workflows, payment reminders, customer outreach, and payment reconciliation. Our clients are businesses such as property management companies and credit unions in Ireland.
The service is provided by PayPathIQ Limited, a company registered in Ireland under number 814270, with its registered office at Venture Hub, 136 Capel Street, Dublin 1, D01 T2C9, Ireland.
Our two roles
Data protection law gives us a different role depending on whose data it is.
| Whose data | Our role | Who decides how it is used |
|---|---|---|
| Website visitors, people who request a demo or contact us, and our clients' staff who use PayPathIQ | Controller | PayPathIQ Limited |
| Our clients' customers and members: people who owe or pay an invoice, service charge, or account balance | Processor | The client business. We act only on its documented instructions under a data processing agreement. |
If a business contacted you through PayPathIQ
Businesses use PayPathIQ to send their own customers invoice notices, payment reminders, payment links, and payment confirmations. That business is the controller of your data. We process it for them.
Where your data came from. Your details come from the business you have an account or agreement with, taken from its existing customer records. We do not buy, rent, or collect contact lists from any other source.
What we process. Your name, contact details (phone number, email address, postal address), account or property reference, invoice and balance details, payment status, and the messages and calls exchanged about your account.
How you may be contacted. By SMS, email, phone, or post, about an existing account only. Messages say which business they come from; SMS messages use a sender name registered with ComReg. We never send marketing or promotional messages to our clients' customers.
Payments. Payment links open a page on a paypathiq.com address, and card details are entered on the hosted page of the business's payment provider, such as Stripe or Global Payments. We never see or store full card numbers or security codes.
Your rights. To access, correct, or delete your data, or to stop being contacted by a particular channel, contact the business that contacted you. You can also contact us and we will pass your request to that business and help it respond.
Data we collect as a controller
| Data | Why we use it | Legal basis |
|---|---|---|
| Name, work email, phone, company, and message from demo, contact, and newsletter forms | To reply, arrange demos, and send updates you asked for | Legitimate interests; consent for newsletters |
| Client staff account details, sign-in records, and activity logs | To provide, secure, and support the service | Contract with our client; legitimate interests in security |
| Billing and contract contacts at client businesses | To invoice and manage the commercial relationship | Contract; legal obligation for accounting records |
| Technical data such as IP address, browser, and error logs | To keep the website and service secure and working | Legitimate interests |
This website does not use advertising or analytics cookies. We do not sell personal data and we do not use it for automated decisions that have legal or similarly significant effects on you.
Who we share data with
We use a small number of service providers to host and run the service, including Microsoft Azure for hosting and our email, SMS, and payment providers. Each is bound by a written contract with confidentiality and security obligations. The full list is on our sub-processors page.
We may also disclose data when the law requires it, to protect the service or the people who use it, or on a client's instruction.
Where data is stored
The PayPathIQ service is hosted in Microsoft Azure data centres in the European Union. Where a provider processes data outside the European Economic Area, we rely on an adequacy decision (for example for the United Kingdom) or the European Commission's Standard Contractual Clauses.
How long we keep data
- Client customer data: for as long as the client instructs and our agreement lasts. At the end of the agreement we return or delete it, unless the law requires us to keep it.
- Message content in the service: up to 365 days, unless the client sets a shorter period or a legal hold applies.
- Delivery records for SMS and email: up to 2 years, so delivery and opt-outs can be proven.
- Payment links: expire 7 days after they are sent.
- Security and audit logs: up to 2 years.
- Website enquiries: up to 2 years after our last contact, unless you become a client.
Security
We protect personal data with encryption in transit and at rest, database-level separation so each client can reach only its own data, role-based access for client staff, and audit logging of access and changes. Payment card data never reaches our systems.
Your rights
You have rights to access, correct, delete, restrict, and object to the processing of your personal data, to data portability, and to withdraw consent at any time. For data we hold as a processor, we pass requests to the client that controls the data and help it respond.
To make a request, email support@paypathiq.com. We respond within one month.
If you are unhappy with how your data is handled, you can complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland (dataprotection.ie). We would appreciate the chance to resolve your concern first.
Changes to this policy
We will update this page when our practices change and show the date of the latest version at the top. We will tell clients about material changes in advance.
Contact
PayPathIQ Limited, Dogpatch Labs, The CHQ Building, Custom House Quay, Dublin 1, Ireland. Email support@paypathiq.com.