Privacy policy

This policy explains what [legal name] ("we") keeps about you when you use Cheque Tracker at chequetracker.com and app.chequetracker.com, why, who helps us run it, and what you can ask for. We decide how this information is used, so we're responsible for it.

What we keep

Your account

• Your email address, and your password, which is stored only in a scrambled (hashed) form.
• If you sign in with Google: the name, email address and profile picture Google shares.
• Your settings, such as your country, currency, date format and time zone.

What you enter

• Cheques: numbers, amounts, dates, the bank they're drawn on, their status and history, and your notes.
• Parties: the names, and any contact person, phone number or notes you add for them.
• Your own bank accounts: a name, the bank, and only the last four digits of the account number.

Payments

When you buy Business, we keep the order, the payment's reference, the amount and the date. Your card, UPI or bank details go to Razorpay and never reach us.

To give one free trial per person

When an account gets a free trial, we keep a one-way fingerprint (a hash) of its email address, not the address itself. We keep it even after the account is deleted, so the same address can't get another trial.

Technical information

Like any website, our hosting providers record technical details of requests, such as IP addresses, browser type and the time, to run the service and keep it secure.

Why we keep it

• To run the service for you: your account, your records, and the plan you're on.
• To take payments and keep the records that tax law asks for.
• To keep the service and your data secure, and to stop abuse, such as repeated free trials.
• To answer you when you write to us, and to tell you about changes to your account or to these policies.

We don't sell your information, show you ads, or use what you enter for anything other than running the service for you. Under the GDPR, our legal bases are the contract with you, our legitimate interests in security and in one free trial per person, and our legal obligations.

Who helps us run the service

These companies process information for us, only to provide their part of the service:

• Supabase: the database where your account and records are kept, and signing in.
• Cloudflare: serves the website and the app, and runs Turnstile, which checks that a real person is signing in.
• Razorpay: takes payments.
• Our email provider: sends the emails your account needs, such as confirming your address or resetting your password.
• Google: only if you choose to sign in with Google.

Some of them may process information outside India. Where they do, they're bound to protect it as the law requires. We may also disclose information when the law requires it.

Cookies and storage in your browser

• The app keeps your sign-in session and a few preferences, such as light or dark, in your browser's storage.
• When you sign in, the app sets a cookie named ct_signed_in on chequetracker.com that holds only the value "1", so this website can take you straight to the app. It contains nothing about you.
• Cloudflare Turnstile and Razorpay may set cookies they need to work securely, when you use them.
• We use no analytics or advertising cookies.

How long we keep it

• Your account and records: for as long as you have an account. When you ask us to delete it, we delete it within 30 days.
• Payment records: for as long as tax and accounting law requires.
• The hash of a trial's email address: for as long as we run the service.
• The demo: deleted when you end it, or after a day.
• Backups: kept for a limited time and then overwritten.

What you can ask for

You can ask for a summary of what we keep about you, to correct or complete it, to delete it, and to have a grievance about it heard. Under India's Digital Personal Data Protection Act you can also name someone to act for you if you can't. If the GDPR applies to you, you can also ask us to limit or stop using your information, ask for a copy in a portable form, and complain to your data protection authority. You can export everything you've entered yourself, in the app, at any time.

Write to support@chequetracker.com from the address on your account. We answer within 30 days, and usually much sooner.

Keeping it safe

Everything travels over encrypted connections. Each account can read only its own records, which the database itself enforces. Passwords are stored hashed, and sign-ins are checked for bots. Only the people who run the service can reach the database, and only to run and support it.

Children

The service isn't meant for anyone under 18, and we don't knowingly keep information about children.

Changes

If we change this policy in a way that matters, we'll tell you by email or in the app before the change applies. The date at the top shows when it last changed.

Contact and grievances

[legal name], [address]. Email support@chequetracker.com.

Grievance officer: [name], at the same email address.