Privacy Policy
Last updated: 26 October 2026
Introduction
At ZeroDue ("we", "our", or "us"), operated by VEROSITE LTD, Company number 16227585, we are committed to protecting and respecting your privacy. ZeroDue is a trading name of VEROSITE LTD. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our invoicing services.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our service, you agree to the collection and use of information in accordance with this policy.
Data Controller
Company: VEROSITE LTD
Trading Name: ZeroDue
Company Number: 16227585
Registered Office: Flat 209, 1 Indescon Square, London, England, E14 9DQ
Email: support@zerodue.co
Data Protection Officer: dpo@zerodue.co
Information We Collect
Personal Information
When you register for an account or use our services, we may collect:
- Name and contact information (email address, phone number)
- Business information (company name, address, VAT number)
- Payment information (processed securely by our payment providers)
- Profile information and preferences
Business Data
Information related to your invoicing activities:
- Invoice data (client details, amounts, descriptions)
- Customer information you input
- Transaction records and payment history
- Expenses you record, and any receipt photos you upload (kept in a private store that only our server can read)
- Your chat with the ZeroDue assistant: the messages you send, its replies, and any photos or voice-to-text you send it (photos are kept in the chat history only as a placeholder after the assistant has read them)
- Notification devices: if you turn on notifications, a push address for your browser or phone
Technical Information
Automatically collected when you use our website:
- IP address and location data
- Browser type and version
- Device information and operating system
- Usage data and website interactions
- Cookies and similar tracking technologies
How We Use Your Information
Service Provision (Legal Basis: Contract)
- Create and manage your account
- Process invoices and payments
- Provide customer support
- Deliver our invoicing services
Legitimate Interests
- Improve our services and user experience
- Conduct analytics and research
- Prevent fraud and ensure security
- Send service-related communications
Consent
- Send marketing communications (with your consent)
- Use non-essential cookies
Legal Compliance
- Comply with legal obligations
- Respond to legal requests
- Maintain records for tax purposes
How the AI assistant uses your data
The chat is run by an AI model (Anthropic's Claude), reached through the Vercel AI Gateway. To answer you, we send the model your message, the recent chat history, and the parts of your business data it needs for that request, such as your business details, clients and invoices. Photos you send in the chat (for example a photo of a job sheet or receipt) are sent to the model once so it can read them.
Nothing is sent to your customers, and no money moves, until you tap Send or Confirm. We do not use your data to train AI models. Our AI providers process it only to return an answer to us.
The small help chat bubble on our public pages is separate. It sends what you type to Anthropic's Claude model, through the Vercel AI Gateway, so it can answer questions about ZeroDue. Please do not put client or payment details in it.
Voice input uses your browser's own speech-to-text. What happens to the audio depends on your browser or phone maker, not on us.
Information Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties except as described below:
Service Providers
Stripe (card payments), Supabase (database and file storage), Vercel (hosting, website analytics and the AI Gateway), Anthropic (the AI model), Resend (sending invoice and reminder emails), Sentry (error monitoring; details are stripped before they leave our servers), Companies House (looking up a company you search for), and push services run by your browser or phone maker (notifications). Analytics and advertising tags from Google load only if you accept those cookies. We have a data processing agreement (DPA) with each of Stripe, Supabase, Vercel, Anthropic, Resend and Sentry.
Legal Requirements
When required by law, court order, or to protect our rights and safety.
Business Transfers
In connection with a merger, acquisition, or sale of assets (with notice to users).
Your clients' data, and invoice emails
When you add a client, or send them an invoice, quote or reminder, their name, email, phone, address and tax number are personal data. For that data you are the controller and we are your processor: we handle it only to run ZeroDue for you, on your instructions, under the data processing terms in our agreement with you. You are responsible for having a lawful reason to hold and send it.
If you are a client who received an invoice, the business that sent it decides what it holds about you; ask them first. You can also write to support@zerodue.co and we will pass your request on.
Invoice emails contain a tiny image that tells the sender when the email was opened (we show it to the sender as "opened by the client"). Some mail apps block it. We also record when an invoice page is viewed.
Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- SSL/TLS encryption for data transmission
- Encryption at rest by our database host
- Access controls and authentication
Your Rights Under UK GDPR
Right of Access
Request copies of your personal data
Right to Rectification
Correct inaccurate personal data
Right to Erasure
Request deletion of your data
Right to Restrict Processing
Limit how we use your data
Right to Data Portability
Transfer your data to another service
Right to Object
Object to processing based on legitimate interests
Right to Withdraw Consent
Withdraw consent for processing
Right to Complain
Contact the ICO if you have concerns
To exercise any of these rights, please contact us at support@zerodue.co. We will respond within one month of receiving your request.
Deleting your account: in Settings, choose "Delete account". That cancels your subscription and erases everything straight away: your businesses, clients, invoices, quotes, payments, expenses and receipt photos, your logo, repeat invoices, chat history, AI usage records, notification devices, reports you made about AI replies and your sign-in login. If any part fails you will see an error and nothing is reported as done; try again or email support@zerodue.co. Cannot sign in? See how to delete your account.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Account Data: while your account is active; erased when you delete your account
- Invoice Data: while your account is active; erased when you delete your account. You are responsible for keeping your own tax records, so download the CSV export from Settings first
- Chat history: kept while your account is active so the assistant can see your recent messages; erased when you delete your account
- Receipt photos: kept with the expense they belong to until you delete the expense or your account
- Website Analytics: 26 months maximum
- Marketing Data: Until you unsubscribe or object
International Data Transfers
Some of our service providers process data outside the UK/EEA, mainly in the United States (Anthropic, Vercel, Stripe, Resend and Sentry). We rely on the UK-US data bridge where the provider is certified under it, and otherwise on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in their DPA.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
ZeroDue is a trading name of VEROSITE LTD (Company number 16227585).
Email: support@zerodue.co
Data Protection Officer: dpo@zerodue.co
Post: VEROSITE LTD, Flat 209, 1 Indescon Square, London, England, E14 9DQ
ICO registration number: ZC285164
Complaints: You have the right to complain to the Information Commissioner's Office (ICO) if you believe we have not handled your personal data properly. Visit ico.org.uk for more information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically for any changes.