Privacy Policy

This policy explains what personal data Chasry ("we", "us") collects and why, both from you, if you have a Chasry account, and about your clients, whose details you enter into Chasry so we can send them payment reminders on your behalf.

When you create a Chasry account, we collect:

• Your business name and email address,
• Your password, stored securely by our authentication provider (we never see it in plain text),
• Your currency preference, and your language and theme choices,
• Your subscription status and Stripe customer and subscription identifiers, once you upgrade to Pro,
• The date and time you accepted these Terms and this Privacy Policy,
• Basic technical data (like error reports) that helps us keep the service working.

To send reminders on your behalf, you give us your client's name, email address, and optionally their phone number, along with the invoice details you log (amount, due date, invoice number, notes, and a payment link if you set one). We collect this because you enter it, not directly from your clients themselves.

If you attach a file to an invoice (for example, a PDF), Pro plan only, we store that file so it can be included with your reminder emails. It may contain your client's own details if you've included them in it, that's your content, we just store and send it on your behalf.

Reminder emails can include a link that lets your client tell you they've already paid. If your client uses it, we record the date and time of that confirmation against the invoice and notify you by email. The links in reminder emails contain a signed token that identifies only that one invoice; they don't sign your client in to anything or expose any other data.

For this client data, you are responsible for having a lawful reason to contact your own clients about their own invoices. We process it only to provide the reminder service you've asked for.

Under data protection law (including the EU/UK GDPR), you are the data controller for your clients' personal data, you decide what to collect and why. Chasry acts only as a data processor, handling that data solely to provide the service you direct us to.

We use the data above to:

• Create and run your account,
• Generate and send reminder emails to your clients on your behalf, on the schedule you've set,
• Create the next invoice in a series when you've marked an invoice as repeating, and notify you when we do,
• Record your client's payment confirmation when they use the link in a reminder, and notify you about it,
• Send you the service emails you've turned on, like the weekly summary and copies of your own reminders,
• Enforce the free plan's invoice limit,
• Process your Pro subscription payment,
• Respond to support requests you send us,
• Monitor for and fix errors, and prevent abuse of the service.

We do not sell your data or your clients' data to anyone, and we do not use it for advertising.

We use a small number of service providers to run Chasry, each only for the purpose described:

• Supabase, for our database and account authentication,
• Stripe, to process your Pro subscription payment (Stripe never receives your clients' invoice or contact details, only your own billing information),
• Resend, to deliver account emails and the reminder emails we send to your clients on your behalf,
• Sentry, for error monitoring. We keep what we send it minimal, for example an invoice ID, never your client's email address or the invoice amount,
• Vercel, to host the application and provide cookieless, anonymous visit statistics.

Separately, a small number of authorized Chasry staff can access account data, yours and, where necessary to help you, your clients' contact and invoice details you've entered, to provide support, investigate abuse, or keep the service running. That access is limited to what's needed for those purposes.

Our service providers may process and store data in the European Union and/or the United States, each under their own data protection commitments. Where data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses or an equivalent safeguard recognized under EU/UK data protection law.

Chasry uses:

• A session cookie that keeps you signed in. This is required for the app to work,
• A cookie that remembers your chosen language,
• A cookie that remembers your browser's timezone, so due dates and reminder days are shown for your own calendar day,
• Your light/dark theme preference, stored in your browser (not a cookie).

We don't use advertising or analytics tracking cookies. We do count page visits with Vercel Web Analytics, a cookieless, privacy-friendly service that doesn't identify or track individual visitors.

We keep your data for as long as your account is active. You can permanently delete your account at any time from Settings, which removes your profile, your clients, your invoices, and your reminder history, and cancels any active subscription.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. Most of this is already available directly in Settings. For anything else, email us at support@chasry.com. If you received a reminder email from a Chasry user and want your details removed, the business who sent it is responsible for that data since they entered it, but you can also contact us and we'll help.

Chasry is not directed at, and must not be used by, anyone under 18.

We may update this policy from time to time. We'll update the "last updated" date above, and for material changes, we'll try to notify account holders by email.

Questions about this policy? Email us at support@chasry.com.