1. Who We Are
Chasr is operated by Chasr Limited, a company registered in England and Wales ("we", "us", "our"). We provide a UK invoice automation platform that helps self-employed professionals and small businesses create, send, and chase invoices.
Contact: [email protected]
2. What Data We Collect
When you use Chasr, we collect and process:
- Account information — your name, email address, and business details (business name, address, VAT number)
- Invoice data — invoice amounts, line items, dates, VAT breakdowns, payment status, and chase history
- Client details — your clients' names, email addresses, phone numbers (if SMS enabled), and business details as entered by you
- Payment information — processed securely by Stripe; we do not store card numbers or bank details
- FreeAgent data — OAuth tokens (encrypted with AES-256-GCM) and sync metadata if you connect FreeAgent
- Usage data — pages visited, features used, and technical information (browser type, IP address)
3. How We Use Your Data
- Creating and sending invoices on your behalf
- Sending automatic payment chase emails and SMS reminders to your clients
- Processing payments via Stripe
- Syncing invoices and contacts to FreeAgent (if connected)
- Providing invoice tracking, payment status, and CSV export
- Communicating with you about your account and the Service
- Improving the platform and fixing bugs
4. Legal Basis for Processing (GDPR)
We process your personal data on the following legal bases:
- Contract: Processing necessary to provide the Service you have signed up for (creating invoices, sending chases, processing payments).
- Legitimate interest: Improving the Service, preventing fraud, and ensuring platform security.
- Legal obligation: Retaining financial records as required by UK law.
- Consent: Where required, such as for marketing communications.
5. Third-Party Services
We share data with the following third parties only as necessary to provide the Service:
- Stripe — payment processing (Stripe Privacy Policy)
- Resend — email delivery for invoices and chase reminders
- BulkSMS — SMS delivery for chase reminders (if SMS add-on is enabled)
- FreeAgent — accounting sync (if connected by you)
6. Data Retention
- Active accounts: We retain your data for as long as your account is active.
- After account closure: Account data is retained for 90 days to allow reactivation, then permanently deleted.
- Financial records: Invoice and transaction records may be retained for up to 7 years to comply with UK financial record-keeping requirements.
7. Your Rights (GDPR)
Under the UK General Data Protection Regulation, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate or incomplete data
- Erasure — request deletion of your data (subject to legal retention requirements)
- Portability — receive your data in a structured, machine-readable format (CSV export is available in-app)
- Object — object to processing of your data based on legitimate interest
- Restrict processing — request that we limit how we use your data
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8. Data Security
We take the security of your data seriously and implement:
- AES-256-GCM encryption for sensitive credentials (e.g. FreeAgent OAuth tokens)
- TLS encryption for all data in transit
- Input sanitisation and rate limiting
- Secure payment processing via Stripe (PCI DSS compliant)
9. Cookies
Chasr uses essential cookies required for the Service to function (e.g. session authentication). We do not use third-party tracking or advertising cookies.
10. Children
Chasr is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.
11. International Transfers
Your data may be processed by third-party providers located outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or our website. The "last updated" date at the top reflects the most recent revision.
13. Contact
For privacy-related questions or requests:
Chasr Limited
Email: [email protected]
Website: chasr.online