Privacy Policy
Last updated: July 25, 2026
1. What This Policy Covers
This Privacy Policy explains what information ChambaPay collects, how we use it, and the choices you have, when you use chambapay.app and the ChambaPay application (together, the "Service").
2. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account & company info | Name, email, password (hashed), company name, logo, brand color | You, at signup / in Company Settings |
| Client records you enter | Client name, email, phone, address | You, when adding a client |
| Business documents | Estimates, invoices, receipts, line items, prices | Generated by you using the Service |
| Payment data | Subscription billing details; your clients' card details when they pay an invoice online | Processed directly by Stripe — we never see or store full card numbers |
| Usage data | Log data such as IP address, browser type, pages visited | Collected automatically |
3. How We Use Information
- To provide, operate, and maintain the Service (creating documents, generating PDFs, calculating totals).
- To send transactional emails: account verification, password resets, and — at your request — invoices/receipts to your clients.
- To process Premium subscription billing via Stripe.
- To detect, prevent, and respond to fraud, abuse, or security incidents.
- To improve and troubleshoot the Service.
We do not sell your personal information or your clients' personal information.
4. Client Data You Enter
When you add a client's name, email, phone, or address to ChambaPay, you are acting as the data controller for that information and are responsible for having a lawful basis to store and use it (for example, an existing business relationship with that client). ChambaPay acts as a data processor for that content, storing it on your behalf so you can generate estimates, invoices, and receipts.
5. Third-Party Service Providers
| Provider | Purpose |
|---|---|
| Stripe | Subscription billing and client invoice payments |
| Email delivery provider (e.g. SendGrid / MailerSend) | Sending verification, password-reset, and document emails |
| Hosting provider (DigitalOcean) | Servers and database that store your account and business data |
These providers only receive the information necessary to perform their function and are bound by their own privacy and security commitments.
6. Cookies
We use only the minimum cookies/local storage needed to keep you signed in and remember your session. We do not use third-party advertising trackers.
7. Data Retention
We retain your account and business data for as long as your account is active. If you delete your account from Company Settings, we delete your company's data within a reasonable period, except where we are required to retain records (for example, billing records) for legal or accounting purposes.
8. Your Rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information. You can update most information directly in the app, delete your account from Company Settings, or contact us at support@chambapay.app to make a request.
9. Security
We use industry-standard measures such as password hashing, encrypted connections, and access controls to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Children's Privacy
The Service is intended for business use by adults and is not directed at children under 16. We do not knowingly collect personal information from children.
11. International Users
Our servers are located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.
12. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.
13. Contact
Questions about this Privacy Policy or a data request? Email support@chambapay.app.