Privacy Policy
What ChequeKo collects, what it refuses to collect, and what you can do about it.
Draft — pending legal review. This document describes how ChequeKo is built and operated, but it has not yet been reviewed by counsel. It must be reviewed against Philippine data privacy and consumer law before public launch. The few measures still marked Planned are not live yet; everything else described here is.
1. Never collected
ChequeKo has nowhere to put any of this:
- Bank usernames, passwords, PINs or one-time passwords.
- Full bank account numbers. An optional last four digits is the maximum.
- Signature images or signature data of any kind.
- Payment card details. ChequeKo is free.
- MICR or routing information.
2. What we collect
- Account: your email, display name, preferences, and the identifier Google uses for you. Never a password.
- Cheque data: payees, dates, amounts, memos and your own reference fields. Stored so your register works.
- Setup: the templates, printer profiles and payees you save.
- Operational: print counts, timestamps, sessions and security events. IP addresses and user-agent strings are kept only as salted one-way hashes.
3. Guest sessions
Without an account we set a signed, HTTP-only cookie to track your free print allowance. It identifies a session, not a person. Create an account and the guest session is retired.
4. Calibration images
A cheque photo used for the alignment overlay is processed in your browser and never uploaded. There is no endpoint that accepts one.
5. Logs and analytics
Cheque contents never reach logs or analytics. Payees, amounts and memos are excluded at the boundary, not filtered afterwards.
6. What administrators see
Counts, dates and account status. Never a payee, an amount or a memo. The admin queries cannot reach cheque contents, so this holds structurally rather than by policy.
7. Sharing
We do not sell your data or use it for advertising. It is shared only with the infrastructure providers who run the service, and where the law requires it.
8. Retention
Your records stay until you delete them. Guest session records are deleted automatically after 90 days. Deleting your account removes your cheques, templates and printer profiles.
9. Your rights
Export everything as JSON or CSV, or delete your account, from Account settings. No email request is needed for either.
10. Security
Session tokens are stored only as one-way hashes. Every permission is enforced on the server. See the security page.
11. Contact
Write to privacy@chequeko.com.