Privacy policy

Tigran Avakov, a self-employed individual, Mirzo-Ulugbek 45A, 100007 Tashkent, Uzbekistan, trading as DemurrageCheck, decides how the data described here is processed. Write to support@demurragecheck.com with any question about it.

• Your email address, to create the account and to send sign-in links.
• Your password, stored only as a salted hash that cannot be turned back into the password.
• The name of your company and the name you sign letters with, as you enter them.
• Invoices you send: the files you upload or forward to your private address, and what is read from them: parties, bill of lading and container numbers, dates, rates and amounts, each with the line of the page it was taken from.
• Findings and letters we prepare from those invoices, and the dates and outcomes you record when you send a letter and the carrier answers.
• Requests for a sign-in link and wrong passwords, with the email address and the network address they came from, deleted within two days; they limit guessing and floods of sign-in mail.
• Technical records needed to run the service: the time of a request, the state of your plan, and the sender of an email sent to an address of ours that is not open, kept in our service log for seven days.

We process this data to perform the contract you entered into when you signed up: without the invoices there is nothing to check. Technical records rest on our legitimate interest in keeping the service secure and working.

• Invoice files, what is read from them, findings and letters stay while your account is open.
• A ZIP archive you upload is kept until the PDFs are taken out of it, and for seven days if that fails, so that we can look at it.
• The record of each email that reaches your company's address: sender, subject, size and the result of the sender checks, never its body or file names, kept for 13 months.
• Billing records are held by our payment provider for as long as tax law requires, which is outside our control.

You can close a company yourself on its settings page. Closing cancels its subscription at once, then deletes its invoice files, what was read from them, findings, disputes, letters, reminders, settings and our billing records of it; if your email address is used for no other company here, your sign-in and password go too. We keep only an empty record that the company existed and when it was closed, with how many files and records were deleted (and the number of its Paddle subscription while a refund is being decided), and our log of the payment events Paddle sent us, with their ids and types and no names or amounts, for 90 days. If a refund or a fee not yet invoiced needs a decision, our team gets an email with the company's id, the Paddle subscription number and that fee by currency; it stays in our mailbox. Receipts and payment documents stay with Paddle. Our database host keeps restore points for 30 days, so deleted records leave those copies within 30 days.

• Cloudflare runs the application, the database, the object storage that holds your files, and the outgoing email.
• Paddle is the merchant of record and handles payment, tax and receipts. We never see your card details.
• Anthropic, the maker of the Claude models, receives the text of the pages of an invoice, so that its items can be read. Its commercial terms do not allow it to train models on your files, and it deletes that text on its side within 30 days, unless it must keep it longer to enforce its usage policy or to comply with the law. The reading is then verified against the page text, and an item that cannot be found there is not used.

Within our own business, a reviewer may open an invoice file and what was read from it, to answer an item the reading could not settle or to repair a failed run. That is the entire list. We do not sell data and do not share it with advertisers.

We set one cookie, after you sign in, which keeps you signed in. On the payment pages, Paddle's checkout may store its own data in your browser, under Paddle's privacy policy. There is no analytics tracker and no advertising pixel on this site, and no third party script on any page except the payment pages (/billing and /pay), which load the checkout script of Paddle. That is why you were never asked to dismiss a consent banner.

We serve Geist and Geist Mono from our own domain. Loading these fonts does not contact a third-party font service.

Ask us and we will send you everything we hold about your account, correct anything wrong in it, or delete the account and its data.

We answer within 30 days and usually within one business day. If you are in the UK, the EU or another region with a data protection authority, you may complain to it, though we would rather you told us first and gave us the chance to fix the problem.

The application runs on Cloudflare infrastructure distributed across regions, so data may be processed outside your country. Cloudflare and Paddle both operate standard contractual clauses for international transfers. Anthropic may also process the page text it receives outside your country.