1. Who we are
Paybacker LTD (“Paybacker”, “we”, “us”, “our”) is a company registered in the United Kingdom. We operate the website paybacker.co.uk and provide AI-powered bill analysis and savings recommendation services.
For any privacy-related enquiries, you can contact us at hello@paybacker.co.uk.
2. Data we collect
We collect the following categories of personal data:
Your name, email address and password when you create an account.
Read-only access to your Gmail or Outlook inbox to identify bills, contracts and renewal notices. We only read emails relevant to household bills and subscriptions.
Read-only access to your bank transactions via Open Banking (powered by Yapily, FCA-regulated) to identify recurring payments and spending patterns. We can never move your money or make payments on your behalf.
When you use the documents vault, we save copies of bills, receipts, invoices, statements, certificates, policies and similar documents from your connected inbox, or files you choose from Google Drive. We record details read from each document, such as the supplier, amount, date and any renewal or expiry date. Files are stored privately and only you, and anyone you choose to share a link with, can open them.
If you connect Google Drive, we can only see the files you pick or that Paybacker creates for you (Google’s “drive.file” permission). We use it to import the files you choose and, on Pro, to save a copy of your documents into a Paybacker folder in your Drive. We cannot see the rest of your Drive.
If you connect Todoist, we create reminder tasks for the dates you ask us to, such as a renewal or expiry date. We do not read your other Todoist tasks.
3. How we use your data
We use your personal data solely to provide and improve our savings identification service. Specifically, we use your data to:
- Identify bills, subscriptions and recurring payments.
- Analyse your current tariffs and contracts against available market deals.
- Surface personalised switching recommendations in your dashboard.
- Send you alerts when contract end dates are approaching or better deals become available.
- Find, sort and store the documents you ask us to keep, and remind you before their due, renewal or expiry dates.
- Let you share a read-only register of your documents with someone you choose, such as your accountant, until you revoke the link.
- Provide customer support and respond to your enquiries.
Our legal basis for processing is your consent (for email and banking data) and legitimate interest (for account management and service delivery).
4. Data storage
Your data is stored securely in Supabase, our database provider, which hosts data on encrypted servers within the UK and EU. All data is encrypted in transit (TLS) and at rest. We follow industry best practices for access control and regularly review our security measures.
5. Data sharing
We do not sell, rent or trade your personal data to any third party. We may share limited data with the following categories of service providers, solely to operate our platform:
- Supabase — database hosting and authentication.
- Stripe — payment processing (we never see or store your full card details).
- Yapily — Open Banking data access (read-only bank transactions).
- Resend — transactional email delivery.
- Anthropic: AI processing to read bills, receipts and other documents and the emails they arrive in. Anthropic does not use this data to train its models.
- Google: Gmail and Google Drive access, only when you connect them.
- Todoist: reminder tasks, only when you connect it.
Google user data
Paybacker’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We only use Gmail and Google Drive data to provide the features you can see in Paybacker: finding bills, subscriptions, renewals and disputes, and keeping and reminding you about your documents.
- We never sell Google user data or use it for advertising.
- We do not use Google user data to develop, improve or train generalised AI or machine learning models.
- Nobody at Paybacker reads your Google data unless you ask us to for support, it is needed for security or to comply with the law, or it has been aggregated and anonymised.
- You can disconnect Gmail or Google Drive at any time in Paybacker, and remove Paybacker’s access in your Google Account settings.
6. Affiliate disclosure
Paybacker earns referral commissions when you switch to a new provider through links on our platform. These are paid by the provider, not by you. This does not affect the price you pay — you will always pay the same price as if you had gone directly to the provider. Our recommendations are based on genuine savings potential for you, and we clearly disclose all affiliate relationships.
7. Data retention and deletion
We retain your personal data for as long as your account is active or as needed to provide our services. If you close your account, we will delete your personal data within 30 days, except where we are legally required to retain it (for example, financial records for tax purposes).
You can request deletion of your data at any time by emailing hello@paybacker.co.uk. We will process your request within 30 days.
8. Cookies
We use cookies and similar technologies on our website. These fall into two categories:
- Essential cookies — required for the website to function (authentication, session management). These cannot be disabled.
- Analytics cookies — we use PostHog and Google Analytics to understand how visitors use our website so we can improve it. These are only set with your consent.
For full detail including every third-party service we use, see our Cookie Policy.
9. Your rights under UK GDPR
Under UK GDPR and the Data Protection Act 2018, you have the following rights:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — ask us to correct any inaccurate or incomplete data.
- Right to erasure — request that we delete your personal data.
- Right to data portability — receive your data in a structured, commonly used format.
- Right to object — object to certain types of processing, including direct marketing.
- Right to restrict processing — ask us to limit how we use your data.
- Right to withdraw consent — withdraw your consent at any time where processing is based on consent.
To exercise any of these rights, email us at hello@paybacker.co.uk. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
10. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. If we make significant changes, we will notify you by email or by placing a prominent notice on our website. We encourage you to review this policy periodically.
11. Contact
Paybacker LTD is a company registered in England and Wales.
Registered address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
If you have any questions about this privacy policy or how we handle your data, please contact us at hello@paybacker.co.uk.