Privacy Policy

Transactor ("we", "us", "our") is a free expense and invoice tracker for freelancers and small businesses, available at www.transactor.app. This policy explains what information we collect, why we collect it, and how we handle it. The short version: your books are your business. We collect only what the product needs to work, and we never sell or rent your data to anyone. The one time anything is passed on is when you choose to sign in to another Transactor product with your account, and then only your name and email address — see section 5.

1. Information we collect

We collect the following information, all of which you provide directly:

• Account information. Your email address and password when you sign up. We never store your password. What we keep is a one-way cryptographic hash of it (argon2id), which cannot be reversed to recover the password itself.
• Company details. Information you add about your businesses, such as company name, country, city, state, tax identifiers (e.g. GSTIN), bank account details, and invoice numbering preferences. These are used to organise your books and to generate your invoices.
• Financial records. The income and expense records, entities (customers and vendors), employees, payments, and remarks you enter into the app.
• Files. Invoices, receipts, and other documents you choose to attach to records.
• Support communication. Emails you send to support@transactor.app.
• Usage analytics. We use Google Analytics to understand aggregate traffic (page views, device type, rough location), on our marketing pages and on some pages inside the app. This is standard, aggregated analytics — it is never sent your financial data.

2. How we use your information

• To provide the service: storing your records, generating invoices and reports, and syncing across your devices.
• To authenticate you and keep your account secure.
• To respond when you contact support.
• To send service emails (e.g. verification codes, important account notices). Marketing-style emails always include an unsubscribe link.
• To understand aggregate usage so we can improve the product.

3. What we never do

• We never sell or rent your data to anyone.
• We never share your financial records with third parties for marketing.
• We never mine your books to build advertising profiles. Transactor has no ads.
• Your records never leave Transactor. Signing in to another Transactor product (section 5) passes on who you are, never what is in your books.

4. Cookies and local storage

Keeping you signed in uses two cookies, both strictly necessary. Both are set on our API host, are marked httpOnly so no script on the page can read them, carry no Domain attribute — so they are never sent to another subdomain — and last 30 days:

• transactor_refresh — your sign-in session. It is rotated each time it is used, so a stolen copy stops working as soon as the real one is used again.
• transactor_sso — proof of who is signed in, so that another Transactor product can identify you without your typing a password again (section 5). It is only ever read by us, and grants nothing by itself.

The short-lived access token that authorises each API call is held in memory only. It is never written to your browser's storage, so closing the tab discards it.

Your browser's local storage is used for convenience, never for authentication: your preferences (dark mode, language), which company you last had selected, and a cached list of country tax profiles so the app does not re-fetch it on every page.

Google Analytics sets its own cookies to measure traffic. These are on our marketing pages and also on some pages behind sign-in, so to be precise: it counts page views, device type and rough location, and it is never sent the contents of your records. We use no advertising or cross-site tracking cookies anywhere.

5. Signing in to other Transactor products

Your Transactor account is also the sign-in for our other products — currently Balance (balance.transactor.app), which tracks money you lend to and borrow from people. Transactor is where the password lives; the other product never sees it.

This only ever happens because you started it. When you choose to sign in to one of those products, your browser is sent here, we check you are signed in, and we hand that product a one-time code. It exchanges the code with us directly, and all it receives back is:

• your Transactor account id,
• your email address and your name, if you have set one,
• whether your email address has been verified.

That is the whole list. No financial data of any kind is included — no records, no companies, no entities, no files — and the other product receives no token that would let it read your Transactor books or act as you here. It keeps its own records under its own account for you, governed by its own privacy policy, such as Balance's.

We do not do this for anyone outside Transactor. There is no way for a third-party app to ask for access to your account, because that ability does not exist.

6. Personal access tokens and our other apps

Besides the website, Transactor can be reached from apps that have no browser and so cannot hold a sign-in cookie — our Mac app, and a connector that lets an AI assistant add and read records on your behalf. These sign in with a personal access token, which you create yourself in the app and can revoke at any time.

Two things are worth knowing about a token:

• It has the same access you do. A token can read and write your records, so treat it like a password: paste it only into software you trust, and revoke it the moment you no longer need it or think it has leaked. Revoking takes effect immediately.
• By default it does not expire, because a token that stops working without warning breaks whatever depends on it. You can set an expiry when you create one.

We store only a one-way hash of each token, never the token itself, alongside the name you gave it so you can tell your tokens apart, and the date it was last used — recorded at most once an hour rather than on every call.

If you use the AI connector, note that the assistant you connect it to is a separate service with its own privacy policy, and whatever you ask it about your records passes through that service. That is outside our control, so connect it only if you are comfortable with that.

7. Where your data lives

Your data is stored on Amazon Web Services (AWS) infrastructure in the Asia Pacific (Mumbai) region. All traffic between your browser and our servers is encrypted in transit using HTTPS.

8. Third-party services

We rely on a small number of processors to run Transactor:

• Amazon Web Services — hosting, database, file storage, and email delivery.
• Google Analytics — aggregate traffic analytics, as described in sections 1 and 4.

These providers process data only to deliver their service to us, under their own security and privacy commitments.

9. Data retention and deletion

We keep your data for as long as your account is active. If you want your account and all associated data deleted, email support@transactor.app from your registered email address and we will delete it. Account deletion is honored — there is no dark pattern here.

10. Your rights

You can, at any time:

• Access and update your company details and records directly in the app.
• Request a copy (export) of your data.
• Request correction or deletion of your data.
• Unsubscribe from non-essential emails using the link in any such email.

To exercise any of these rights, email support@transactor.app.

11. Security

We take reasonable technical measures to protect your data: encrypted connections (HTTPS), passwords stored only as argon2id hashes, sign-in sessions that can be revoked, and access to production data restricted to what is needed to operate the service. Changing your password signs you out of every browser and device. No system is perfectly secure, so please use a strong, unique password.

Personal access tokens are separate and are not affected by a password change — that is deliberate, so that changing your password does not silently break the apps you have connected. If you think a token has leaked, revoke that token; changing your password alone will not stop it.

12. Children

Transactor is a business tool and is not directed at children. You must be at least 18 years old (or the age of majority in your jurisdiction) to use it.

13. Changes to this policy

If we make material changes to this policy, we will update this page and revise the "Last updated" date above. Continued use of Transactor after a change means you accept the updated policy.

14. Contact

Questions about privacy? Email support@transactor.app.