TallyArc, Inc. ("TallyArc", "we", "us") is committed to protecting your personal information. This policy explains what we collect, how we use it, and what rights you have over it.
Account information: When you register, we collect your name, work email address, company name, and password (stored as a one-way hash).
Business data: Invoice details, client records, payment records, and any other data you upload or create while using the Service.
Usage data: Log data including IP addresses, browser type, pages visited, and timestamps. We use this to maintain security and improve the Service.
Payment information: Billing details are collected and processed by our payment processor (Stripe). We do not store raw card numbers on our servers.
Communications: If you contact us by email or through the Service, we retain those communications to resolve disputes and provide support.
We do not sell your personal data. We may share information with:
We retain your account and business data for as long as your account is active or as needed to provide the Service. After account termination, data is retained for 30 days before permanent deletion, unless we are legally required to retain it longer. You may request earlier deletion by contacting us.
We use session cookies that are essential for the Service to function (authentication, CSRF protection). We do not use third-party advertising trackers or sell data to advertisers. You can control cookie settings in your browser, but disabling essential cookies will affect Service functionality.
We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, role-based access controls, and regular security reviews. No method of transmission over the internet is 100% secure; while we strive to protect your data, we cannot guarantee absolute security. Please report any suspected security issues to security@tallyarc.io.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@tallyarc.io. We will respond within 30 days.
TallyArc operates from the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US or other countries. We implement appropriate safeguards (such as standard contractual clauses) for international transfers where required.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the Service at least 14 days before the changes take effect. Your continued use after the effective date constitutes acceptance.
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us: