Effective Date: April 24, 2026 | Last Updated: April 24, 2026
Trailing Paper ("Trailing Paper," "we," "us," or "our") operates a B2B SaaS platform that enables small businesses to create invoices, send estimates, collect card payments from clients, and manage business finances. We are committed to protecting the privacy of the individuals and businesses that use our platform. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have with respect to your data.
Please read this Privacy Policy carefully. By registering for an account, accessing the Service, or interacting with any Trailing Paper client-facing page (such as an invoice or estimate link), you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy is incorporated into and forms part of our Terms of Service.
This Privacy Policy does not constitute legal advice. If you have questions about your specific legal obligations or rights, consult qualified legal counsel.
This Privacy Policy applies to two distinct groups of individuals who interact with Trailing Paper:
If you are a Client visiting an invoice or estimate page, your primary data relationship for payment processing is with Finix Payments, Inc., not with Trailing Paper. Please review Finix's privacy policy for information on how your payment card data is handled.
3.1 Merchant Account Information
When you register for a Trailing Paper account, we collect:
3.2 KYC and Identity Verification Data
To enable payment acceptance through Finix, Trailing Paper is required by federal law — including the Bank Secrecy Act (BSA) and applicable Anti-Money Laundering (AML) regulations — to collect Know Your Customer (KYC) information. This data is collected through our onboarding flow and transmitted to Finix for merchant underwriting. KYC data we collect includes:
Collection of this data is not optional for Merchants who wish to accept card payments. See Section 5 for details on how KYC data is handled and protected.
3.3 Bank Account Information
To receive settlement funds from card payments, you must link a business bank account. Bank account linking is facilitated through Plaid Inc. (see Section 7). Through the Plaid connection process, we receive your bank account routing number and account number solely for the purpose of configuring your settlement destination with Finix. We do not use your bank account credentials for any other purpose.
3.4 Business and Transaction Data
In the course of your use of the Service, we collect and store the business data you create or input, including:
3.5 Subscription and Billing Data
If you subscribe to a paid Trailing Paper plan, we collect information related to your subscription, including your chosen plan tier, billing cycle, and payment method metadata (such as the last four digits of your card and card type). Trailing Paper does not receive, store, or process your full card number, CVV, or expiration date for subscription billing — that data is handled by our billing processor in compliance with PCI-DSS standards.
3.6 Usage and Technical Data
We automatically collect certain technical data when you use the Service, including:
This data is used to operate, maintain, secure, and improve the Service. It is not used to build advertising profiles or shared with advertising networks.
3.7 Data Collected from Client-Facing Pages
Clients who visit invoice or estimate pages shared by Merchants interact with pages hosted by Trailing Paper. The data we directly collect from Clients on those pages is limited to:
Trailing Paper does not collect or store payment card numbers, CVV codes, or card expiration dates from Clients. Card payment data submitted on invoice pay pages is transmitted directly to Finix's PCI-DSS-compliant infrastructure. If Finix collects a Client's name or email address for receipt delivery, that information is governed by Finix's own privacy policy. Trailing Paper may receive limited transaction confirmation metadata from Finix (such as a transaction ID and status) but not raw cardholder data.
We use the information we collect for the following purposes:
We do not use your personal information to serve you third-party advertising, build advertising profiles, or engage in behavioral targeting across other websites or platforms.
KYC data — including SSN, DOB, EIN, and home address — is among the most sensitive personal information we collect. We treat it accordingly with the following protections and limitations:
Trailing Paper does not receive, store, process, or transmit payment card numbers, CVV codes, or card expiration dates. All payment card data submitted through Trailing Paper invoice payment pages is collected exclusively by Finix Payments, Inc. and processed within Finix's PCI-DSS-certified infrastructure. Trailing Paper is not in scope for PCI-DSS cardholder data environment requirements with respect to card numbers.
When a Client submits a card payment on an invoice page, the card data is transmitted directly from the Client's browser to Finix using Finix's tokenization libraries or hosted payment fields. Trailing Paper receives only non-sensitive confirmation data from Finix after a transaction is processed, such as a transaction ID, payment status, and the last four digits of the card used. This confirmation metadata is stored by Trailing Paper solely to update the invoice payment status in your account.
For information about how Finix handles payment card data, please review Finix's Privacy Policy at finix.com/privacy-policy.
Trailing Paper uses Plaid Inc. ("Plaid") to facilitate secure bank account linking for settlement purposes. When you connect your bank account through Trailing Paper, you will be redirected to or presented with a Plaid-hosted authentication interface. Plaid acts as an intermediary between you and your financial institution using an OAuth-based flow.
Through the Plaid connection, Trailing Paper receives your bank account routing number and account number in order to configure your settlement account with Finix. Trailing Paper does not receive your online banking username or password. Trailing Paper does not use your linked bank account data for any purpose other than configuring payment settlement.
Your use of Plaid's services is also governed by Plaid's Privacy Policy, which you are encouraged to review. You may disconnect your linked bank account at any time through your Trailing Paper account settings, subject to any pending settlement activity. Disconnecting your bank account will not delete previously transmitted routing and account information already on file with Finix.
If you choose to register or log in to Trailing Paper using Google Sign-In, Google shares the following information with us: your full name, email address, and Google profile ID. We use this information exclusively for the purpose of authenticating your identity and associating your Trailing Paper account with your Google account.
Trailing Paper does not receive your Google account password. We do not use Google Sign-In data for advertising purposes, and we do not share the data obtained through Google Sign-In with any third party except as otherwise described in this Privacy Policy (e.g., for account-level communications or legal compliance). We do not access any Google services, contacts, Drive files, or other Google account data beyond the profile fields described above.
Your use of Google Sign-In is also subject to Google's Privacy Policy and Google's Terms of Service. You may disconnect Google Sign-In from your Trailing Paper account through your account settings, provided you have configured an alternative authentication method (such as an email and password) first.
We do not sell, rent, or trade your personal information to third parties. We share your information only in the following circumstances:
We implement technical and organizational security measures designed to protect your information from unauthorized access, loss, misuse, alteration, or destruction. These measures include:
No method of data transmission or storage is completely secure. While we take reasonable and appropriate steps to protect your information, we cannot guarantee the absolute security of data transmitted to or stored on our systems. You use the Service at your own risk. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
Trailing Paper uses cookies and similar technologies to operate the Service effectively. We use the following categories of cookies:
Trailing Paper does not use third-party advertising cookies, does not participate in cross-site behavioral advertising networks, and does not share cookie-derived data with advertising platforms. You can control cookies through your browser settings, but disabling strictly necessary cookies may impair your ability to use the Service.
We retain different categories of data for different periods based on legal requirements, operational necessity, and your instructions:
Notwithstanding any deletion request, we may retain data that we are legally required to retain, that is necessary to resolve pending disputes, to enforce our agreements, or that has been de-identified or aggregated such that it can no longer be associated with you.
Subject to applicable law, you may have the following rights with respect to your personal information:
To exercise any of these rights, please contact us at support@trailingpaper.com with "Privacy Request" in the subject line. We will respond to verified requests within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information. This section supplements the rest of this Privacy Policy and applies to California residents only.
Categories of personal information collected. In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA: identifiers (name, email, IP address), commercial information (invoices, payment history, subscription data), financial information (bank account data, KYC data), internet or other electronic network activity information (usage logs, session data), and geolocation data (approximate location derived from IP address). We have not collected biometric information, audio/visual data, or inferences drawn from personal information to create consumer profiles for advertising purposes.
Right to Know. You have the right to request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete. You have the right to request deletion of personal information we have collected about you, subject to certain exceptions (including legal retention obligations).
Right to Correct. You have the right to request correction of inaccurate personal information we maintain about you.
Right to Opt Out of Sale or Sharing. Trailing Paper does not sell your personal information and does not share your personal information with third parties for cross-context behavioral advertising purposes. You therefore do not need to submit an opt-out request for these purposes, but if you believe we have done so in error, please contact us at support@trailingpaper.com.
Non-Discrimination. We will not discriminate against you for exercising your CCPA/CPRA rights. We will not deny you the Service, charge you different prices, or provide you with a lower quality of service because you exercised your privacy rights.
How to submit a request. California residents may submit a request by emailing support@trailingpaper.com with "Privacy Request" in the subject line, or by submitting a request through the account settings page. We will respond within 45 days. We may extend this period by an additional 45 days where reasonably necessary, with notice.
The Service is designed for use by businesses and is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If you are under 18, you are not permitted to register for or use the Service.
If we become aware that we have inadvertently collected personal information from a minor under 18 without appropriate consent, we will take prompt steps to delete that information from our records. If you believe that we may have collected information from a minor, please contact us immediately at support@trailingpaper.com.
Trailing Paper is operated in and from the United States. If you access or use the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country or jurisdiction.
By using the Service or providing information to us, you consent to the transfer of your information to the United States and to the processing of your data in the United States in accordance with this Privacy Policy. If you are located in the European Economic Area, United Kingdom, or other jurisdictions with data transfer restrictions, please be aware that we do not currently offer a separate data processing agreement or EU Standard Contractual Clauses. The Service is primarily intended for U.S.-based businesses.
The Service integrates with and may contain links to third-party services and websites, including but not limited to Finix Payments, Inc., Plaid Inc., and Google. These third parties operate independently and have their own privacy policies, which govern their collection and use of your information. Trailing Paper is not responsible for the privacy practices or content of any third-party services.
We encourage you to review the privacy policies of these services before sharing information with them:
The inclusion of any link or integration does not imply endorsement by Trailing Paper of the linked service, and your use of third-party services is entirely at your own risk and subject to their respective terms.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will notify you by sending an email to the address associated with your account and/or by displaying a prominent notice within the Service at or before the time the changes take effect. The updated Privacy Policy will be posted at trailingpaper.com/privacy-policy with a revised "Last Updated" date.
Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must stop using the Service and may request deletion of your account as described in Section 13. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:
We will make reasonable efforts to respond to all legitimate privacy inquiries within 30 days. For legal notices or formal requests, please include "Privacy Request" in your email subject line so that your message is routed to the appropriate team.