Privacy Policy

1. Introduction

PaymentCruncher ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment reminder service for TutorCruncher users.

By using PaymentCruncher, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (encrypted)
• Company/organisation name

2.2 TutorCruncher Data

When you connect your TutorCruncher account, we access and store:

• Client names and email addresses
• Outstanding invoice and credit request information
• Payment status and history

This data is accessed via the TutorCruncher API using the API key you provide. We only access data necessary to provide the payment reminder service.

2.3 Usage Data

We automatically collect certain information when you use our service:

• Reminder sending history
• Actions logged against clients
• Login timestamps

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our service
• Send payment reminder emails on your behalf
• Process your subscription payments
• Send you service-related communications
• Respond to your enquiries and support requests
• Improve our service

4. Third-Party Services

We use the following third-party services:

4.1 Firebase (Google)

We use Firebase for authentication and database storage. Your data is stored on Google's secure servers. See Google's privacy policy at policies.google.com/privacy.

4.2 Stripe

We use Stripe to process subscription payments. We do not store your full payment card details. Stripe's privacy policy is available at stripe.com/privacy.

4.3 Resend

We use Resend to send emails on your behalf. See their privacy policy at resend.com/legal/privacy-policy.

4.4 TutorCruncher

We integrate with TutorCruncher's API to access your client and invoice data. Your use of TutorCruncher is subject to their own privacy policy.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account or your subscription ends:

• Custom email domains are deleted immediately upon subscription cancellation
• If your account is inactive (no subscription) for 12 months, we will send a warning email
• After 12 months of inactivity, your account and all associated data will be permanently deleted
• You may request immediate deletion of your account at any time

6. Data Security

We implement appropriate security measures to protect your data:

• All data is transmitted over HTTPS (TLS encryption)
• Passwords are encrypted using industry-standard hashing
• API keys are stored securely and never exposed to clients
• Access to production systems is restricted

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA) or UK, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Portability: Request your data in a portable format
• Objection: Object to processing of your data
• Restriction: Request restriction of processing

To exercise these rights, please contact us at paymentcruncher@gmail.com.

8. Cookies

We use essential cookies only, which are necessary for authentication and security. We do not use tracking or advertising cookies.

9. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.