Privacy Policy

1. The free check — nothing about your Stripe data is kept

The free check at /audit works two ways. You can paste a Stripe restricted (read-only) key, which we use in memory, for that one request only, to read your recent charges, refunds, disputes, payouts, invoices, subscriptions and account details. Or you can upload a Stripe CSV export, which we read in memory the same way. Either way we compute the report and discard the inputs: we do not store your key, your file or any of your Stripe data.

Two small records are kept. An anonymous analytics event (a random cookie id and the step name, such as "audit completed") with no financial data or personal identifiers. And, when you use a key, a one-way hash of your Stripe account id for 30 days, so we can limit how often the same account is checked. The hash can't be turned back into your account id.

2. Your account — what we store

If you create an account and connect Stripe, we store what's needed to check your payouts every day: your email address; your restricted Stripe key; a copy of your Stripe activity (charges, payouts, balance transactions, refunds, disputes, subscriptions, invoices and the customer names and emails attached to them); and the results we compute from it, such as payout checks, alerts and metrics.

If a bookkeeper connected your Stripe account (or you connected it through their link), the bookkeeper sees the results for it, including the names and emails of your customers. Your data is kept until the bookkeeper removes your business or closes their account, and you can stop access at any time by deleting the key in Stripe.

Your Stripe key is encrypted at rest and can only read. Conciliq never moves money and never writes to your Stripe account or your books. We sign you in with one-time email links, so there is no password to store.

3. Email

We email you sign-in links, your payout checks and alerts, and account notices. If you give us your email at sign-up or on a free-check result, we also send a short note on Stripe payouts. Every one of those notes has an unsubscribe link, and unsubscribing doesn't affect your account emails.

4. Who else handles your data

We use these outside services to run Conciliq. Each one sees only what its job needs:

• Hostinger — hosts the application and database, and sends our email from our own mailbox.
• Stripe — the source of your payout data, and the processor for our own billing. We never see your card number.
• ActiveCampaign — holds our mailing list: your email address, where you signed up, and your plan.
• Google Fonts, jsDelivr and the Tailwind CDN — deliver the fonts and page scripts your browser loads, so they see your IP address and browser details.

We don't use advertising trackers, and we don't send your data to AI services.

5. How we use your data

Only to run the service: to check your payouts, compute your figures, send your checks and alerts, and talk to you about your account. We don't sell your data or use it for advertising.

6. Keeping and deleting your data

We keep your data while your account is open. You can delete all of it at any time from Settings → Danger zone: that removes your Stripe copy, payout checks, metrics, alerts, recovery records and your stored key. You can also revoke the key in Stripe whenever you like, which stops our access at once.

When you delete your account or ask us to, everything tied to it is deleted within 30 days. Your email stays on our mailing list until you unsubscribe or ask us to remove it.

7. Contact

Questions, or a request to see or delete your data? Email support@conciliq.com.