Workspaces, invoices, quotes and send records are stored on our server so reminder and quote follow-up sequences can run. If you sign in, we store your email address and sign-in sessions; sign-in codes are stored only as hashes and expire after 15 minutes.
SMTP passwords are encrypted at rest and never logged. Reminder emails go only to the debtors listed in your own CSV, through your own email server — never through ours. Quote links are private token links; anyone with the link can view and accept the quote.
SMS reminders are sent only when you record that your clients agreed to receive them, and only to phone numbers you provide. Every SMS includes opt-out instructions.
Payments: if you subscribe, payment is processed by Waffo, our payment provider; we do not store your card details. Your clients never pay through us — invoice emails only link to the payment page you set yourself, such as your own Stripe Payment Link.
Visits are counted anonymously with self-hosted Umami analytics (no cookies, no personal identifiers). Questions: contact@clioos.com.