Privacy Policy

Last updated: April 2026

ChitPact ("we", "us", "our") is committed to protecting your privacy in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

1. What we collect

When you use ChitPact we may collect:

• Account information — name, email address, profile photo (if you use Google login)
• Expense data — amounts, descriptions, categories, split details, receipts you upload
• Session & device data — IP address, country, city, device type, operating system, browser, login method, and session timestamps (for security and fraud detection)
• Statement data — if you upload a bank or credit card statement PDF, the extracted transactions are stored linked to your account

2. How we use your data

• To provide and improve the ChitPact service
• To send transactional emails (expense notifications, settlement reminders, account confirmations)
• To detect fraud and suspicious login activity
• To understand aggregate usage patterns (no individual profiling for advertising)

3. Third-party services

We use the following third-party services that may process your data:

• Google OAuth — if you sign in with Google, your name and email are shared with us by Google
• Resend — transactional email delivery
• Azure AI Document Intelligence — OCR processing of receipt images and statement PDFs
• Azure (Microsoft) — all data is hosted in Azure Australia East (Sydney)

We do not sell your personal data to any third party.

4. Data retention

We retain your data for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Aggregate anonymised analytics may be retained indefinitely.

5. Your rights

Under the Australian Privacy Act you have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us at privacy@chitpact.com.

6. Security

All data is encrypted in transit (HTTPS) and at rest. Passwords are hashed using bcrypt and never stored in plaintext. We do not store bank credentials.

7. Contact

For privacy-related enquiries: privacy@chitpact.com