Privacy Policy

Tally Crow (“we”, “our”, or “us”) is committed to safeguarding your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and bookkeeping web application (the “Service”).

By using Tally Crow, you agree to the terms of this Privacy Policy.

Who We Are

Tally Crow is a bookkeeping and invoicing platform that enables users to create and manage invoices, credit notes, and business records. We operate primarily within the European Union and store all client-generated data in EU-based infrastructure.

For any questions related to privacy or data handling, you may contact us at: info@tallycrow.com

Information We Collect

We collect the following types of information:

Information You Provide To Us

• Account details: name, email address, and password (stored hashed, never in plain text)
• Business details: Company name, and other relevant details that you have saved within the application
• Content: Invoices, credit notes, client details, and any other records you create within the application

Automatically Collected Information

• Usage data: Where necessary, we collect log files, IP address, browser type, device information
• Cookies and analytics: on our marketing website only and with your consent, usage statistics via Google Analytics 4 (loaded through Google Tag Manager). See the Cookies section below and our Cookie Policy.

Third-Party Authentication

• If you sign in using Google or other third-party platforms, we receive only the basic profile information required to create your account (name, email address).

How We Use Your Information

We process your data in order to:

• Provide and maintain the Service
• Allow you to securely log in and manage your account
• Store, display, and export records that you create
• Respond to customer service enquiries
• Monitor platform usage and improve performance

We do not currently use your data for personalised advertising, nor do we sell personal data to third parties. If this changes, we will seek your explicit consent in accordance with applicable data protection laws.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: To provide you with access to the platform and its features
• Legitimate interest: To improve our services and ensure security
• Legal obligation: To comply with applicable regulatory requirements

Data Sharing and Third Parties

We share your data only where necessary, with:

• Supabase: database, authentication and file storage for the application
• Stripe: subscription billing, and, where you enable it, processing your clients’ online invoice payments via Stripe Connect (you connect your own Stripe account and are the merchant of record)
• MailerSend: sending transactional email such as invoices, credit notes, reminders and notifications
• Cloudflare: bot and abuse protection (Cloudflare Turnstile) on sign-in, sign-up, password reset and our newsletter form
  • On the newsletter form this check runs invisibly, see Cloudflare’s Turnstile Privacy Addendum
• Google: optional Google sign-in, and, on our marketing website only and with your consent, Google Analytics 4 and Google BigQuery (our analytics data warehouse)
• LinkedIn, Meta, Reddit and X: on our marketing website only and with your consent, advertising and campaign-measurement pixels (we may add further platforms over time)
• Namecheap / EasyWP: hosting infrastructure for the application and website

All third-party services are GDPR-compliant and data is hosted within the European Union or under equivalent safeguards.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in and keep the Service working (essential)
• On our marketing website, and only with your consent, measure usage and campaigns

On our marketing website, a consent banner lets you accept or reject non-essential cookies, and analytics and advertising tags load only if you accept. You can change or withdraw your consent at any time using the Cookie Preferences link in our footer, and you can also manage cookies through your browser settings, though disabling some may affect certain features. For full details, see our Cookie Policy.

Data Retention

We retain personal and business-related data for as long as your account remains active, and for a reasonable period thereafter to comply with legal obligations.

You may delete your account at any time. Upon deletion, we will remove your data unless retention is required by law.

Data Export and Portability

You may export your data at any time using the tools provided in the application. For more detailed export requests or complete data deletion, please contact us at info@tallycrow.com.

Security Measures

We take appropriate security measures to protect your data, including:

• Encryption in transit (TLS) and encryption at rest of stored data
• Role-based access controls
• Secure hosting in GDPR-compliant European data centres

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

International Access

Our platform is primarily intended for users within the European Union. Users from other regions may use the Service, but they acknowledge that their data will be stored and processed within the EU under European data protection standards.

Your Rights

If you are located within the EEA or other applicable regions, you have the following rights:

• Access to the personal data we hold about you
• Correction of inaccurate or incomplete data
• Deletion of your data (“right to be forgotten”)
• Restriction or objection to processing
• Data portability

To exercise your rights, contact info@tallycrow.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of any significant changes through the Service or via email. Continued use of the Service constitutes your acceptance of the revised policy.