Privacy Policy

Last updated October 5, 2026

Dunn is run by Defiance Media LLC. It sends invoice reminders and late fees for small businesses. This policy explains what we collect, why, and what we never touch. The short version: we use your information only to run Dunn, we never sell it, and we never read your inbox.

What we collect

• Your account: your name, business name, email, and password (stored scrambled; we can't read it).
• Your Stripe connection: your Stripe account ID, so Dunn can create invoices and see when they're paid. Card and bank numbers stay with Stripe. Dunn never sees them.
• Your invoices and clients: client names and email addresses, amounts, due dates, late-fee terms and payment status.
• Replies from your clients: when a client replies to a Dunn email, we keep what they wrote with the invoice, as a record you can point to if a fee is ever questioned.
• Email records: which emails were sent and when.
• Your plan: Stripe handles payment for your Dunn plan. We keep your plan and renewal date, not your card.
• Basic logs: server logs (like IP address and pages requested) for security and fixing problems.

What we never do

• Read your email. Dunn only receives mail sent to its own addresses, like your clients' replies to Dunn emails.
• Sell or rent your data, or your clients' data.
• Use advertising or tracking cookies. Dunn sets one cookie, to keep you signed in.
• Email your clients about anything except your invoices.

How we use it

To create and send your invoices and reminders, apply your late fees, alert you (for example when a client pays or replies), bill your plan, answer support questions, and keep Dunn secure.

Who else handles it

A few companies help run Dunn, and each gets only what it needs:

• Stripe: invoices, payments and plan billing.
• Resend: sending and receiving Dunn's emails.
• Railway: hosting and database.

We may also share information if the law requires it, or to protect Dunn and its users from fraud or abuse.

If you're a client of a Dunn customer

You got an email from Dunn because a business you work with uses it to send invoices. That business decides what's sent to you. For questions about an invoice, reply to the email or contact the business. For questions about your data, email us too and we'll help.

How long we keep it

For as long as your account is open. After you close it, we delete your data within 30 days, except records we must keep by law (for example, billing records).

Dunn's AI assistant tools

Dunn offers free tools that AI assistants (such as Claude, ChatGPT and Hermes) can use at getdunn.org/mcp. They don't need an account. They work only with what the assistant sends for that request (dates, amounts, names for an email) and we don't store it. Like the rest of the site, the server keeps standard technical logs, such as time and IP address, for security. The assistant you use has its own privacy policy for your conversation.

Security

Connections to Dunn are encrypted, passwords are stored scrambled, and access to data is limited to what's needed to run the service.

Your choices

You can see and change your details in Settings. To get a copy of your data, correct it, or delete it, email hello@getdunn.org. Depending on where you live, you may have more rights; we'll honor them.

Children

Dunn is for businesses and isn't meant for anyone under 18.

Changes

If we change this policy in a way that matters, we'll email you before it takes effect.

Contact

Email hello@getdunn.org.