This Privacy Policy describes how ChaseDue("ChaseDue," "we," "us," or "our") collects, uses, and shares information when you use our websites, applications, and related services (the "Service"). The Service is operated by A. Sathish Kumar("Operator") as an independent product offering. By using the Service, you agree to this Privacy Policy together with our Terms of Service.
1. Who we are
ChaseDue provides invoicing, expense tracking, payment-related workflows, and integrations such as WhatsApp messaging and payment providers. The Operator responsible for the Service is A. Sathish Kumar. Contact for privacy inquiries may be made through the channels published on the ChaseDue website or within the product.
2. Information we collect
Depending on how you use ChaseDue, we may process:
- Account and identity data — such as your name, email address, and authentication identifiers when you register or sign in (for example via Google OAuth).
- Business and invoice data — client names, contact details, invoice amounts, due dates, statuses, descriptions, and notes you choose to store.
- Expense data — descriptions, amounts, categories, and dates you log, including any files you upload for receipt scanning features where available.
- Payment and billing data — when you use integrated payment providers (such as Razorpay), payments are processed by those providers under their terms; we receive only the data needed to reconcile invoices and display status in your account.
- WhatsApp and messaging metadata — when you use features that send messages via the WhatsApp Cloud API, Meta processes message delivery and may provide delivery or read receipts. We store message and status logs as needed to show delivery history in the Service.
- Technical and security data — IP address, device and browser type, timestamps, and diagnostic logs used to secure accounts, prevent abuse, and improve reliability.
3. How we use information
We use personal data to:
- Provide, operate, and improve the Service;
- Authenticate users, enforce Row Level Security and access controls, and prevent fraud;
- Send transactional emails or in-product notices related to your account;
- Deliver reminders and messages you configure, including via WhatsApp where enabled;
- Comply with law, respond to lawful requests, and enforce our Terms.
We do not sell your personal information.
4. Legal bases (EEA, UK, and similar regions)
Where the GDPR or similar laws apply, we rely on: (i) performance of a contract with you; (ii) legitimate interests (for example securing our systems and preventing abuse), balanced against your rights; and (iii) consent where required for optional cookies, marketing, or non-essential analytics.
5. Sharing and subprocessors
We share information only with service providers necessary to run ChaseDue, including:
- Supabase — database, authentication, and hosting infrastructure;
- Meta / WhatsApp — message delivery when you use WhatsApp features;
- Payment processors — such as Razorpay, for payment authorization and settlement;
- Analytics or error reporting — only if enabled, as described in-product.
These providers process data under their own terms and, where applicable, as our subprocessors. We require appropriate contractual and technical safeguards.
6. Data retention
We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations (including tax and accounting rules), resolve disputes, and enforce agreements. You may request deletion of your account subject to legal and contractual requirements.
7. Security
We use industry-standard measures including encryption in transit (HTTPS), access controls, and secure handling of secrets. No method of transmission or storage is completely secure; we work to protect your data and will notify you where required if we become aware of a breach affecting your personal data.
8. International transfers
Your information may be processed in countries where our providers operate (including outside your country of residence). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
9. Your rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data, restrict or object to certain processing, and withdraw consent where processing is consent-based. To exercise these rights, contact us using the details on our website. You may also lodge a complaint with your local data protection authority.
10. Children
ChaseDue is not directed at children under 16 (or the age required in your jurisdiction), and we do not knowingly collect personal information from children.
11. Changes
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may require additional notice where required by law.
12. Contact
For privacy-related requests or questions about how A. Sathish Kumar operates ChaseDue, contact us through the channels listed on the ChaseDue website or your account settings.