Privacy policy

ChaChing Alerts plays a sound when a payment lands in your Stripe account. To do that it needs very little about you, and almost nothing about the people who pay you. This page lists exactly what is stored, why it is stored, who else touches it, and how to have it removed.

What we store about you

• Your email address, because that is how you sign in. There is no password to store: signing in sends a one time link to your inbox.
• Your subscription state, which is your Stripe customer and subscription id, whether you are in the free period or paying, and when the free period ends.
• Your settings: the sound you picked, your monthly goal and its currency, and a Slack or Discord webhook URL if you added one yourself.
• Each connection you create: a label you choose, the id of the Stripe account the payments arrive from, and the signing secret Stripe issued for that connection. The signing secret is encrypted before it is written to the database.

What we store about your payments

For every successful payment Stripe sends us we keep a fixed set of fields and no others: the amount, the currency, the time it was paid, whether it was a live or test payment, the id of the Stripe account it belongs to, the Stripe charge id, and recorded refunds. Sales insights also keep billing and card-issuer country codes, payment-method and wallet categories, and an optional product label explicitly supplied in product_name metadata. Saved price labels are stored separately.

We never store your customers' names, email addresses, full billing addresses, customer IDs, card numbers, or any part of a card number. The event Stripe delivers is read in memory, reduced to the fields above, and discarded. It is not written to a log in full.

What we can see in your Stripe account

Nothing. ChaChing Alerts never asks for a Stripe API key and never asks you to grant it access to your Stripe account. The connection runs the other way round: we generate a private endpoint URL, you add that URL in your own Stripe dashboard as a destination for the charge.succeeded event, and you paste the signing secret Stripe shows you back into ChaChing Alerts so we can verify that the events we receive really came from Stripe.

This means we can only ever see the events you chose to send us. We cannot read your customers, your payouts or your balance, we cannot move money, and we cannot change anything in your account. To stop the flow, delete the destination in your Stripe dashboard or delete the connection here. Either one ends it immediately.

Who else processes this data

We do not sell your data, and we do not use it for advertising. It passes through four service providers, each doing one job:

• Stripe sends us the payment events you asked it to send, and handles our own subscription billing.
• Supabase hosts the database and the sign in system.
• Vercel hosts and serves the application.
• Resend delivers the few emails we send you, such as the sign in link and the welcome message.

If you add a Slack or Discord webhook URL yourself, then the amount and currency of each payment are also posted to the channel you chose. That is the only case where your payment data leaves the four providers above, and it happens only because you asked for it.

Cookies and tracking

The only cookies set are the session cookies that keep you signed in. There are no advertising cookies, no third party analytics and no tracking pixels on this site. Your sound choice and a few display preferences are kept in your own browser's local storage and are never sent to us.

What the public pages show

The home page carries a small live counter. It is fed by aggregate numbers only: how many payments arrived across the whole service in the last 24 hours, how many accounts are connected, and roughly how many people are using it. It never publishes an amount, a currency, an account name or anything that could identify you or your business.

How long it is kept

Payment rows stay while your account exists, so your totals and history stay intact. If you delete a connection, the payments it already delivered are kept so your past totals do not change, but nothing new arrives from it.

Your choices and your rights

• Stop the data at the source by deleting the destination in your own Stripe dashboard. Nothing further reaches us.
• Delete a connection from your dashboard here at any time.
• Delete your account yourself from the Delete account section of your dashboard. It takes effect immediately and removes your profile, your connections, your settings and your payment rows together. It cannot be undone. If you have a subscription running, cancel it first so Stripe stops billing you, then delete.
• Ask for a copy of your data or a correction, or for the deletion to be done for you. Write to support@chachingalerts.com from the address you signed up with and we will action it.

Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to your local data protection authority. The same address reaches us for any of those.

Children

ChaChing Alerts is a tool for businesses that take payments. It is not directed at children and we do not knowingly collect data from anyone under 16.

Changes to this policy

If what we store or who processes it changes, this page changes with it and the date at the top moves. Material changes are announced by email to the address on your account before they take effect.

Who we are

ChaChing Alerts is operated by Mark Fulton, Reinventing.AI Solutions. Questions about this policy go to support@chachingalerts.com. If you are signed in, the support form in your dashboard reaches the same place and is the faster route for anything that is not a privacy request.