Last updated: April 2026
We collect: (a) Account information — name, email address, password (hashed, never stored in plain text); (b) Billing information — processed and stored securely by Stripe; we do not store raw card numbers; (c) Usage data — pages visited, features used, login timestamps; (d) Technical data — IP address, browser type, for security and audit logging.
We use your data to: provide and improve the service; send transactional emails (verification, receipts, scan reports if opted in); prevent fraud and enforce our Terms of Service; comply with legal obligations. We do NOT sell your personal data to third parties.
Data is stored on servers in the United States. Passwords are hashed using bcrypt (rounds=12). All data transmission is secured via HTTPS/TLS. Access to production data is restricted to authorized personnel.
We use a single HttpOnly session cookie for authentication. We do not use third-party tracking cookies or advertising cookies.
We share minimal data with: Stripe (billing — subject to Stripe's privacy policy); email delivery providers (transactional emails only). No other third parties receive your personal data.
Account data is retained while your account is active. You may request deletion of your account and associated data at any time by emailing privacy@chartible.co. Billing records are retained for 7 years as required by financial regulations.
You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; opt out of non-transactional emails at any time via the unsubscribe link or your account settings.
We may update this policy. We will notify you of material changes by email or a prominent notice on the service.
Privacy questions: privacy@chartible.co