Sign in

Privacy Policy


We do not access any customer data as a strict matter of policy, unless you’ve given us explicit written approval to do so for security, legal compliance, authorized support, migration, or for debugging any issues.

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.



1. Information Collection

This notice applies to all information collected or submitted on the OkaySend website, web application, and other browsers and platforms, hereafter referred to as simply OkaySend.

OkaySend occasionally needs to collect information for convenience, practicality, or technical requirements. We may collect information from you in a variety of ways, including when you visit our website, create an account, use our Services, or otherwise interact with us. This information includes:


We may also use local storage to store, retrieve, and track changes to user data. This allows our extension to persist user data and session state (such as keeping you logged in). We do not access this data, and it may be stored exclusively in your browser or on your personal device.



2. Use of Information

a) How We Use Information

We use the information you provide to operate OkaySend's features. We do not share this information with outside parties except to the extent necessary to accomplish OkaySend's functionality.

We use return email addresses to answer the email we receive. Such addresses are not used for any other purpose and are not shared with outside parties.

We use non-identifying and aggregate information to better design OkaySend, maintain, and improve our Services. For example:

When information is used in this or a similar manner, we do not disclose anything that could be used to identify the individuals on whom the information is based.

We may disclose your information in response to subpoenas, court orders, or other legal process, or to establish or exercise our legal rights or to defend against legal claims.

We may disclose your information when we believe it necessary or desirable in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our policies, and/or to protect our rights and property.

We may disclose information we collect to third-party service providers who help us provide and improve our Services.


b) AI-Powered Features

OkaySend offers optional AI-powered features that help users generate questions, form fields, and other content within the editor.

When users interact with these features, their prompts, instructions, and relevant editor content may be transmitted to third-party AI service providers to generate the requested output.

These providers process the submitted information to provide the requested AI functionality. The information submitted through these features is not used by OkaySend to train its own AI or machine-learning models.

You are responsible for ensuring that information submitted through AI features does not contain personal or sensitive information unless you have the necessary legal basis and authorization to process and share that information with the relevant AI provider.

Where a User supplies their own API credentials for AI features, that User's agreement with the AI provider also applies.


c) Legal Basis for Processing

We rely on the following legal bases to collect and process your personal data, as required by applicable data protection laws such as the GDPR and CCPA:



2A. Identity Verification

Who this applies to. If you were asked to submit an ID document or selfie through an OkaySend link, the business that sent you the request (our user) decides why it is collecting your information and is responsible for how it uses it. OkaySend processes your information on that business's behalf. Contact that business with questions about its use of your information, or email help@okaysend.com.

Two ways to verify. The business may offer one or both of the following:

1. Automated verification through Stripe. You photograph your ID and take a selfie in a verification window provided by Stripe, Inc. Stripe checks the document and compares your selfie to your ID photo. To do this, Stripe creates a mathematical representation of facial features, which may be considered biometric information under laws such as Illinois's Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, and Washington's My Health My Data Act.

OkaySend does not create, receive, or store this sensitive data in its database. We receive only: the verification status, the document type, and name, date of birth, ID number, address, and/or copies of the images. Stripe asks for your consent before collecting biometric information and handles it under its own privacy policy at stripe.com/privacy. Stripe acts as an independent controller for some purposes, including fraud prevention and, if you separately agree, improving its verification technology. To withdraw consent or ask Stripe to delete data, email privacy@stripe.com. Stripe states that biometric identifiers used for verification are removed from its systems within one year.

2. Manual verification. You photograph your ID and take a selfie through OkaySend. We store the images and make them available only to the business, which reviews and compares them. OkaySend does not perform automated facial comparison and does not create faceprints or other biometric templates.

Why we process it. Only to verify your identity for the business that requested it, to detect and prevent fraud, and to meet legal obligations.

Your choice. If you do not want to use automated verification, you can decline and ask the business to verify you another way, such as manual verification.

What OkaySend does not do. We do not sell, lease, trade, or otherwise profit from Identity Verification Data. We do not use it for advertising or to train AI or machine-learning models. (Stripe's own uses are described above and in Stripe's privacy policy.)

Sharing. We share Identity Verification Data only with the business that requested it; with Stripe (automated verification only); and with our cloud infrastructure provider, Google Cloud, which stores data on our behalf.

Retention and deletion. Identity Verification Data stored by OkaySend is permanently deleted:

Stripe retains data it processes under its own policy. Stripe retains non-biometric verification data (including ID document images, extracted details such as name and date of birth, and verification results) for 7 years. Biometric data is still deleted within 1 year.

Your rights. To access or delete data stored by OkaySend or data held by Stripe, contact the business that requested it or email help@okaysend.com or contact us at privacy@okaysend.com.



3. Information Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we assess various factors, including the volume, nature, and sensitivity of the data, the potential risk of unauthorized use or disclosure, the purposes of processing, alternative means to achieve those purposes, and relevant legal requirements.

As mandated by law, we are obligated to retain basic customer information (including Contact, Identity, Financial, and Transaction Data) for six years after the termination of their customer status for tax-related reasons.

Moreover, there may be situations where we anonymize your personal data (rendering it unidentifiable) for research or statistical purposes. In such cases, we may retain and utilize this information indefinitely without providing further notice.

Identity verification information stored by OkaySend, including ID images and selfies, is deleted on the schedule in Section 2A, and customers may delete it sooner. Information held by Stripe is retained under Stripe’s privacy policy. Deleted information may remain in backups and logs for up to 120 days unless the law requires otherwise.

Note: Under certain circumstances, you have the right to request deletion of your data. See 5. Legal Rights below.



4. Data Security

As a SaaS service that you trust your data with, we understand the immense responsibility we have to safeguard your data. We make reasonable efforts to provide a level of security and employ industry-leading security and operational measures to keep your data safe.

Permissions & Authorization
Our data collection system is built on a personal level and you can never see information you don't already have access to.

Physical Security
We use compute services from other Cloud Providers and so do not have any physical servers we run or manage directly. Physical security for these data centers is handled by our trusted Cloud Providers.

Encryption
All of your data exchanged between your computer and our backend is encrypted in transit using industry standard and current encryption protocols for HTTPS. Full disk encryption is used across the entire infrastructure so your data is encrypted at rest as well.


In the event of a data breach that affects your personal data, we will notify you and relevant authorities in accordance with applicable laws.



5. Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

Please learn more about these rights at: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/


How to exercise your rights:


Information processed on behalf of Users:

When OkaySend processes personal information on behalf of a User, the User generally acts as the data controller and OkaySend acts as the data processor.

If you have submitted personal information through an OkaySend request, please contact the organization that sent you the request to exercise your privacy rights. We will assist our User with responding to applicable requests in accordance with our Data Processing Agreement and applicable laws.

Information we control:

To exercise any of the aforementioned rights, please reach out to us at help@okaysend.com.

We may require specific information from you to confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to prevent the disclosure of personal data to unauthorized individuals. Additionally, we may contact you to request further information regarding your request to expedite our response.

We strive to address all legitimate requests within one month. However, in some cases, particularly complex requests or multiple requests may require more time. If this occurs, we will notify you and provide updates accordingly.

Note: You will not be charged a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request under these circumstances.



6. External Services

External services that integrate with OkaySend but are operated independently include, for example:

Except as described in Section 2A for Stripe Identity, we do not allow these third-party service providers to use your personal data for their own purposes and only permit them to process your data for specified purposes in accordance with our instructions.

OkaySend makes reasonable efforts to ensure that all integrated external services are trustworthy and reputable, but OkaySend cannot be held responsible for data collection and usage by such services.



7. Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.



8. Publicly Accessible Information

Some information on OkaySend is considered public:

This information may be visible to other users or the general public depending on your settings and usage. Please ensure that you are comfortable sharing this information before uploading.



9. Children's Privacy

Protecting the privacy of minors is very important to us.

You must be at least 16 years old to create an OkaySend account, as set out in our Terms of Service. Separately, OkaySend may be used by our customers to collect information from other people, such as their clients, who are not account holders. We do not knowingly collect personally identifiable information from anyone under the age of 13, whether they are an account holder or someone submitting information through a customer's request. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children under 13 without verification of parental consent, we take steps to remove that information from our servers.

We do not knowingly collect Identity Verification Data from anyone under 18.



10. California Online Privacy Protection Act Compliance

The California Online Privacy Protection Act aims to encourage businesses not to distribute personal information to others outside that business. We will not distribute your personal information to outside parties without your consent.



11. European Union and United Kingdom Data Protection

OkaySend respects the privacy rights of individuals and is committed to protecting personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), and other applicable privacy laws.

These laws may apply to OkaySend depending on the nature of our activities, the location of individuals whose personal information we process, and the services we provide.

Our role as data Controller and Data Processor

Depending on the circumstances, OkaySend may act as either a data controller or a data processor.

When acting as a data processor, we process personal information in accordance with our Customers' instructions and our Data Processing Agreement.

Your Data Protection Rights

Depending on applicable law, individuals may have the right to:

For personal information processed by OkaySend on behalf of a Customer, please contact the organization that collected your information in the first instance. We will assist our Customers in responding to applicable requests in accordance with our Data Processing Agreement and applicable laws.


International Data Transfers

OkaySend and its service providers may process personal information in countries outside the European Economic Area (EEA) and the United Kingdom.

Where required by applicable data protection laws, we use appropriate safeguards for international transfers of personal information, which may include Standard Contractual Clauses (SCCs), adequacy decisions, or other legally recognized transfer mechanisms.

For more information about our data processing arrangements, please see our Data Processing Agreement.


Contact

For privacy-related questions, requests, or concerns, please contact us at help@okaysend.com.



12. Your Consent

a) By using our site, you consent to our privacy policy.

b) We may use anonymized or aggregated data, which does not identify you individually, to improve our services and create insights. This data is not considered personal data under applicable laws.



13. Access Or Correct Your Information

You can access all your personally identifiable information that we collect or store by logging into your Account on the OkaySend website here: dashboard.okaysend.com.



14. Delete Your Information

You can delete your entire OkaySend account at any time. If you delete your account, all account information and saved page data is deleted after the 30-day reactivation period in our Terms.

Due to the nature of backups and logs, deleted data may persist in backups and logs until they are deleted.

Please email us to delete your OkaySend account at help@okaysend.com



15. Miscellaneous

  1. Google Limited Use Policy

    OkaySend’s use and transfer to any other app of information received from Google Accounts will adhere to Google API Services User Data Policy, including the Limited Use requirements.

    See full disclosure and policy here: Google Limited Use Policy.



16. Contact Us

If you have any questions about this Privacy Policy, please contact us:



17. Changes To This Policy

OkaySend reserves the right to change this policy at any time to reflect new services, changes in our privacy practices or relevant laws. Please check this page periodically for changes. Your continued use of OkaySend following the posting of changes to this policy will mean you accept those changes.




Feel free to reach out at: help@okaysend.com

Last Updated November 1, 2026

Effective as of November 1, 2026