Privacy policy
What we see, and what we don't.
Last updated October 12, 2026
The short version
- Your General Ledger file is read and forecast in your browser. It isn't uploaded unless you choose to share it.
- We receive your email address, a few account names and unusual items for the AI to check, and the forecast you see, to email you the workbook.
- We don't sell your data, show ads, or use advertising or analytics cookies.
- You can ask us to delete what we hold about you at any time.
1Who we are
RightTick is run by Pravakar Dutta, sole proprietor, Adabari, Guwahati, Assam 781012, India (“we”, “us”). We decide how the information described here is used. For anything about this policy or your data, write to privacy@righttick.app.
2What stays in your browser
When you drop your General Ledger CSV into the tool, it's read and forecast on your own computer. Your transactions, balances and the file itself don't leave your browser, except for the specific pieces listed in the next section, or your file if you choose to share it.
Close the page and the file is gone from the tool. We don't ask you to sign in to QuickBooks or connect a bank.
3What we receive, why, and for how long
Only what's needed for each step:
| What | When | Why | Kept for |
|---|---|---|---|
| Your email address | When you run a forecast | To send your Excel workbook; to apply the daily limit (three forecasts per address); to keep a short record of your use: the first and last day, how many forecasts, and whether you asked for tips. Each address gets one AI-written summary, so we also keep a fingerprint (not the numbers) of the forecast it was for. | The record of your use and the fingerprint: until you ask us to delete them. The address linked to a single run: one day. |
| Your IP address | When you run a forecast | Passed to Cloudflare Turnstile to tell people from bots, and counted to limit runs per address per day. | The daily counter: two days. |
| A few account names, with simple facts about how each is used | When we're unsure of an account's type | Sent to our AI provider to suggest the type. You choose the final answer. | The AI's answer: 180 days, so the same file gets the same suggestion. A record of the suggestion and your choice: 12 months, without your email address. |
| The unusual items we ask you about: date, account, customer or vendor name, amount, memo, and the account's usual monthly amount | When the forecast finds possible one-off items | Sent to our AI provider to judge whether each looks like a one-off. You decide what's left out. | As above: the AI's answer 180 days; the suggestion and your choice 12 months, without your email address. |
| Your forecast's headline numbers: cash today, the lowest week, the run rate, and the largest lines by name | When your forecast appears | Sent to our AI provider to write the short summary. Every number in it is checked against your forecast. | The AI's summary: 180 days. |
| The forecast you see on screen: company name, the 13 weeks, both views (account, customer and vendor names with their weekly amounts), the action list, and your choices (items left out, account types, bank balances you entered) | When your forecast appears | To build your Excel workbook and email it to you. | Not stored. The workbook is built, sent and discarded. Our email provider keeps delivery records under its own policy. |
| If a file can't be read: its column headings and the report's title (never the company line or any transaction) | When an upload is refused | To learn which reports people try, so we can support them. | 12 months. |
| Your feedback: your answers and anything you write | Only if you send the feedback form | To make the forecast and the tool better. It's kept with your email address only if you tick "you may email me"; otherwise it's anonymous. | 12 months. |
| Screenshots you attach to your feedback | Only if you attach them | To see the problem or idea you describe. Your browser re-encodes each image before sending it, which removes photo details such as location. | Encrypted and stored privately; deleted within 12 months. Linked to your email address only if you ticked "you may email me". |
| Technical details sent with your feedback: browser, screen size, page errors during your visit, whether your email was sent, whether the AI was used, and how many items you were asked about | When you send the feedback form | To reproduce and fix problems you report, or didn't notice. | 12 months, with the feedback. |
| A feedback link in your email: a random code tied to your forecast and email address | When we email your workbook | So the feedback you send later belongs to the right forecast. | 30 days. |
| Your General Ledger file, if you choose to share it | Only if you tick the box to share it | To improve forecast accuracy. It's never shared or sold. | Encrypted and stored privately; deleted within 12 months (our automatic clean-up deletes it after 11), or sooner on request. |
Whether the AI is used or not, the forecast's numbers always come from your own books. If the AI isn't available, simple rules give the suggestions instead, and nothing is sent to the AI provider.
4Email
We email your workbook to the address you give, once per forecast. If you tick “send me occasional cash flow tips”, we note the day you agreed and may send them; every tips email will have a way to unsubscribe. We don't send tips if you leave the box unticked.
5Who processes it for us
We are based in India. We use these providers to run the tool. They process data on our behalf, under their own terms, and may do so in the United States and other countries.
- Vercel
- Hosts the site and runs the server; stores shared files (Vercel Blob, private).
- Upstash
- Our database: the records, counters and AI answers described above.
- Resend
- Sends the email with your workbook.
- Cloudflare
- Turnstile, the check that you're a person, not a bot.
- Anthropic
- The AI that suggests account types, flags one-offs and writes the summary. Under its commercial terms it doesn't train its models on what we send.
We don't sell or rent your information, and we don't share it with anyone else unless the law requires it.
6How we protect it
Everything travels over HTTPS. Shared files are compressed in your browser, then encrypted by us (AES-256) before they're stored, and kept in private storage that isn't reachable from the web. Only we can read them, with a key kept apart from the files.
8Your choices and rights
Write to privacy@righttick.app to ask what we hold about you, to correct it, or to delete it. A deletion request removes your shared files, the record of your use, any notes you sent, and feedback (with its screenshots) linked to your email address. The suggestion records, refused-file headings and anonymous feedback aren't linked to your email address, so they can't be traced back to you.
We are based in India, and handle your data in line with India's Digital Personal Data Protection Act, 2023. Depending on where you live, you may have further rights under your local law, such as to object to how your data is used or to complain to your data protection authority. To raise a concern or a grievance, write to privacy@righttick.app; we aim to reply within 30 days.
9Children
The tool is for businesses and isn't meant for children.
10Changes to this policy
If we change what we collect or how we use it, we'll update this page and its date before the change takes effect.