Privacy Policy

1. Overview

QuickLogs ("we", "us", "our") respects your privacy. This policy explains what data we collect, why we collect it, and how we handle it. The short version: we collect the minimum needed to run the Service, we never sell your data, and we never look at your financial records.

2. Data We Collect

Account information: Email address and hashed password when you sign up.

Financial data you enter: Transactions (amounts, dates, categories, counterparties, descriptions), receipts and attachments you upload, and company/business details you configure.

Telegram data: If you use the Telegram bot, we receive the messages you send to the bot and your Telegram user ID to link transactions to your account.

Technical data: We collect basic server logs (IP address, browser type, timestamps) to operate and secure the Service. We do not use third-party analytics or tracking scripts.

3. How We Use Your Data

• To provide and operate the Service (storing your transactions, generating P&L reports, processing exports)
• To authenticate you and secure your account
• To parse Telegram messages into structured transactions via AI
• To send you account-related emails (confirmation, password reset)
• To convert uploaded HEIC images to JPEG for compatibility
• To fetch exchange rates for multi-currency transactions

4. What We Never Do

• We never view, read, or analyze your financial data for our own purposes
• We never sell, rent, or share your data with third parties for advertising
• We never use your data to build profiles or target you with ads
• We never train AI models on your financial data

5. Third-Party Services

We use the following third-party services to operate QuickLogs:

• Supabase: Database hosting, authentication, and file storage. Your data is stored in Supabase-managed PostgreSQL databases with row-level security.
• Vercel: Application hosting and deployment.
• Frankfurter API: Foreign exchange rate lookups. No personal data is sent to this service.
• OpenAI: Used to parse natural-language Telegram messages into structured transaction data. Only the message text is sent; no account or financial history is included.

6. Data Storage and Security

Your data is stored in Supabase-managed infrastructure with encryption at rest and in transit. We enforce row-level security so users can only access their own data. Attachments are stored in private Supabase Storage buckets. Passwords are hashed and never stored in plaintext.

7. Data Retention and Deletion

We retain your data for as long as your account is active. Transactions you archive are soft-deleted and can be restored. You can permanently delete your data or your entire account at any time. When you delete your account, all associated data (transactions, attachments, company information) is permanently removed within 30 days.

8. Your Rights

You have the right to:

• Access all data we store about you
• Export your data at any time in Excel format
• Correct or update your data
• Delete your data or your account
• Withdraw consent for data processing (by deleting your account)

9. Cookies

We use essential cookies only for authentication (session tokens). We do not use tracking cookies, analytics cookies, or advertising cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email. The "last updated" date at the top reflects the most recent revision.

11. Contact

For privacy-related questions or requests, contact us at support@quicklogs.io.