Loading Due Agent...
Last Updated: November 2025
Effective Date: November 2025
This Cookie Policy explains how Optflow AI Limited, trading as Due Agent ("we", "our", or "us"), uses cookies and similar tracking technologies when you visit our website at dueagent.com and use our automated billing notification and payment reminder service.
We are committed to being transparent about how we use cookies and giving you meaningful control over your preferences. This policy should be read alongside our Privacy Policy, which explains how we collect, use, and protect your personal data.
By using our website, you agree to our use of cookies in accordance with this Cookie Policy. If you do not agree to our use of cookies, you should set your browser settings accordingly or not use our website.
Cookies are small text files that are placed on your computer, smartphone, or other device when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.
Cookies typically contain:
Cookies allow websites to recognise your device and remember your actions and preferences over time, making your browsing experience more convenient and personalised.
We use cookies for several important reasons:
We use different types of cookies based on their function and how long they remain on your device. Below is a detailed breakdown of the cookies we use:
Legal Basis: GDPR Article 6(1)(f) - Legitimate Interest
These cookies are essential for the website to function and cannot be disabled without severely affecting your ability to use our service. They do not require consent under GDPR as they are strictly necessary for the provision of the service you have requested.
| Cookie Name | Purpose | Duration |
|---|---|---|
| stack-session | Maintains your authenticated session with Stack Auth. Essential for login and account access. | 30 days or until logout |
| stack-refresh-token | Allows you to stay logged in without re-entering credentials. Improves security by rotating tokens. | 90 days |
| __Secure-next-auth.session-token | Next.js authentication session token for server-side session validation and security. | Session (30 days) |
| __Host-csrf-token | Protects against Cross-Site Request Forgery (CSRF) attacks. Critical security measure. | Session |
| _vercel_jwt | Vercel platform token for secure content delivery and edge function authentication. | Session |
| da-cookie-consent | Stores your cookie consent preferences to remember your choices and avoid showing the banner repeatedly. | 1 year |
Legal Basis: GDPR Article 6(1)(a) - Consent
These cookies collect information about how you use our website, such as which pages you visit most often and if you receive error messages. This information helps us improve our service and optimise performance. We only set these cookies with your explicit consent.
| Cookie Name | Purpose | Duration |
|---|---|---|
| _ga | Google Analytics cookie to distinguish unique users and calculate visitor, session, and campaign data (if analytics is enabled). | 2 years |
| _ga_* | Google Analytics 4 property-specific cookie for measuring interactions and conversions. | 2 years |
| da-vitals | Core Web Vitals measurement for page performance monitoring (LCP, FID, CLS metrics). | 90 days |
Legal Basis: GDPR Article 6(1)(a) - Consent
These cookies allow our website to remember choices you make (such as your language, region, or display preferences) and provide enhanced, more personalised features. We only set these cookies with your consent.
| Cookie Name | Purpose | Duration |
|---|---|---|
| da-preferences | Stores your display preferences (theme, dashboard layout, notification settings). | 1 year |
| da-language | Remembers your language preference for content display. | 1 year |
Legal Basis: GDPR Article 6(1)(a) - Consent
Note: Due Agent does not currently use marketing or advertising cookies. If we introduce these in the future, we will update this policy and obtain your explicit consent before setting any marketing cookies. This section is included for transparency and future-proofing.
Cookies can be set by the website you visit (first-party cookies) or by other websites that provide services to that site (third-party cookies).
These are cookies set directly by Due Agent (dueagent.com domain). We have full control over these cookies and they are used exclusively for our service functionality. Examples include:
These are cookies set by external services we use to provide certain functionality. Third-party cookies we may set include:
All third-party services we use are GDPR-compliant and bound by Data Processing Agreements (DPAs). You can review their privacy policies to understand how they handle cookies and personal data.
Some third-party cookies, particularly Google Analytics, may transfer data to servers located outside the United Kingdom and European Economic Area (EEA), including to the United States. Where such transfers occur, they are protected by:
You can prevent international transfers by analytics cookies by rejecting analytics cookies in your consent preferences. For more details, see our Privacy Policy section on international transfers.
Session cookies are temporary and are deleted from your device when you close your web browser. They help us recognise you as you navigate between pages on our website and ensure features work correctly during your visit.
Examples of our session cookies:
Persistent cookies remain on your device for a set period (specified in each cookie) or until you manually delete them. They help us remember your preferences and settings across multiple visits, improving your user experience.
Examples of our persistent cookies:
The length of time a cookie remains on your device depends on its type and purpose:
| Retention Period | Cookie Types | Reason |
|---|---|---|
| Session (browser close) | CSRF tokens, temporary session data | Security and privacy |
| 30 days | Authentication session (or until logout) | Convenient login experience |
| 90 days | Refresh tokens, performance metrics | Seamless session renewal, analytics |
| 1 year | Cookie consent, user preferences | Remember your choices and settings |
| 2 years | Analytics cookies (if consented) | Long-term usage trends and improvements |
GDPR Compliance Note
Our cookie retention periods comply with GDPR data minimization principles (Article 5(1)(c)). We only keep cookies as long as necessary for their intended purpose and automatically delete them when they expire. You can delete cookies manually at any time through your browser settings.
You have the right to decide whether to accept or reject cookies. You can exercise your cookie rights by managing your preferences through multiple methods:
When you first visit our website, you will see a cookie consent banner that allows you to accept or reject optional cookies. You can choose to:
If you have a Due Agent account, you can manage your cookie preferences at any time through your Privacy Settings Dashboard. This allows you to:
Most web browsers allow you to control cookies through their settings. You can typically configure your browser to:
Browser-specific cookie management guides:
Microsoft Edge
Settings > Cookies and site permissions > Manage and delete cookies
View Edge cookie guideImportant Notice
Blocking or deleting cookies may impact your ability to use certain features of our website. Strictly necessary cookies are essential for core functionality, and blocking them may prevent you from logging in or accessing your dashboard. You can always re-enable cookies if you experience issues.
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. While there is currently no universal standard for how websites should respond to DNT signals, we respect your privacy preferences.
Our approach to DNT signals:
You can enable DNT in your browser settings. However, we recommend using our cookie consent banner or Privacy Settings Dashboard for more granular control over your preferences.
Under the General Data Protection Regulation (GDPR) and the Privacy and Electronic Communications Regulations (PECR), you have specific rights regarding cookies and tracking technologies:
You have the right to give or withhold consent for non-essential cookies. Consent must be freely given, specific, informed, and unambiguous. We provide clear information about each cookie type and allow you to choose which categories you accept.
You can withdraw your cookie consent at any time through your Privacy Settings Dashboard or by clearing cookies in your browser. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.
You have the right to know what cookies are being set, why they are being set, how long they will remain, and what data they collect. This Cookie Policy provides comprehensive information about all cookies we use.
You have the right to object to the use of cookies for analytics, marketing, or other non-essential purposes. You can exercise this right by rejecting optional cookies in your consent preferences.
If you believe we have not complied with GDPR or PECR requirements regarding cookies, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Some cookies may process personal data as defined by GDPR. Personal data is any information relating to an identified or identifiable natural person. In the context of cookies, this includes:
For cookies that process personal data, we apply the same data protection principles as outlined in our Privacy Policy:
We may update this Cookie Policy from time to time to reflect changes in our cookie usage, legal requirements, or best practices. When we make material changes, we will:
We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies. Your continued use of our website after changes become effective constitutes acceptance of the updated policy, unless the changes require fresh consent under GDPR.
If you have questions about this Cookie Policy, our use of cookies, or wish to exercise your rights, please contact us:
Data Protection Officer: dpo@dueagent.com
Privacy Email: privacy@dueagent.com
Privacy Settings: /dashboard/settings/privacy
Postal Address: Optflow AI Limited, 43 Fairfoot Road, London, England, E3 4EG
We aim to respond to all cookie-related inquiries within 72 hours. For data subject access requests or other GDPR rights, we will respond within 30 days as required by law.
For more information about how we protect your privacy and handle your personal data, please review our related policies:
Comprehensive information about how we collect, use, store, and protect your personal data.
View Privacy PolicyFor customers who act as data controllers when using our service to process client data (available in account settings).
View DPA (Account Required)Regulatory Compliance
This Cookie Policy complies with:
© 2025 Optflow AI Limited, trading as Due Agent. All rights reserved.
Company Number: 14990157 | Registered in England and Wales