Privacy Policy

From you, the account holder:

• Your email address, used to sign in. Passwords are handled by our authentication provider and stored only in hashed form.
• Your business name.

From you, about your customers — entered by you via invoice import or manual entry:

• Customer / company name, contact person, phone number, and optional email.
• Invoice numbers, amounts, due dates, and payment status.
• Any notes you write about a customer's payment relationship or chasing tone.
• The content of WhatsApp messages sent to chase payment, and any replies received from that customer.

Vowline uses this data only to run the service you've asked for:

• Drafting and sending payment reminder messages on your behalf, over WhatsApp.
• Classifying customer replies (e.g. a payment promise, a dispute, a claim of payment already made) so the right follow-up happens.
• Computing payment-history stats (days late, invoices overdue) shown back to you.

We don't use your data or your customers' data for advertising, and we don't sell it to anyone.

Vowline is built on a small number of infrastructure providers, each processing data only to provide their part of the service:

• Meta (WhatsApp Business Platform) — sends and receives your chase messages. Meta processes message content and phone numbers under its own Business and Privacy terms.
• Anthropic (Claude API) — drafts message text and classifies replies. The customer name, invoice details, and your notes for that customer are sent to Claude for this purpose. Anthropic does not use API data to train its models by default.
• Supabase — hosts the database and handles sign-in and authentication.
• Resend — sends account emails such as invitations and the daily summary. It processes your email address and the email content.
• Vercel — hosts and serves the application.

We don't share your data with any other third party.

If you're one of our users' customers receiving a chase message: your business contact's Vowline account holds your name, phone number, and invoice/payment details for the purpose of following up on an unpaid invoice. This is processed under the account holder's legitimate business interest in collecting payment owed to them, consistent with Singapore's Personal Data Protection Act (PDPA). Questions about your data should go to the business you're dealing with directly — they control their own Vowline account.

Data is kept for as long as your account is active, so payment history and message threads stay useful for future chasing decisions. You can ask us to delete your account and associated data at any time — contact hello@vowlineapp.com.

Data is stored in Postgres with row-level security scoped to your account, so one Vowline account can never read another's data. Access to the Claude and WhatsApp APIs happens only from our servers — API keys are never exposed to the browser.

If this policy changes materially, we'll update the date at the top and, for significant changes, notify account holders by email.

Questions about this policy or your data: hello@vowlineapp.com (AVERPS PTE. LTD., Singapore).