This Privacy Policy explains how SYCONX LLC collects, uses, shares, and protects personal information in connection with ChargeCrafter, our software-as-a-service platform for accounting, invoicing, quotes and estimates, subscription and recurring billing, expense and vendor-bill management, bank-feed reconciliation, inventory and stock tracking, and tax reporting. Please read it carefully so you understand our practices. This Privacy Policy works together with our Terms & Conditions, our Cookie Policy, and our GDPR disclosures.
Effective date: July 31, 2026
1. Introduction & Scope
ChargeCrafter (https://chargecrafter.com) is owned and operated by SYCONX LLC, a limited liability company organized under the laws of the State of New York, United States ("SYCONX", "we", "us", or "our"). Our principal place of business is 2 West Montauk Highway, Westhampton, NY 11977, USA.
This Privacy Policy applies to personal information we process when you visit https://chargecrafter.com, create or use a ChargeCrafter account, communicate with us, or otherwise interact with the ChargeCrafter service and related websites, applications, and features (collectively, the "Service"). In this policy, "You" or "Customer" means the business or individual using ChargeCrafter, and "Customer Data" means the data you enter or upload into the Service, including invoices, clients, products, vendors, bills, bank transactions, documents, and similar records.
ChargeCrafter is designed for and directed to businesses and business users. If you access the Service on behalf of an organization, you represent that you are authorized to act for that organization and to accept this Privacy Policy on its behalf.
This Privacy Policy does not apply to the products, websites, or services of third parties, including the third-party payment providers and connectors you may choose to link to your account. Their handling of your information is governed by their own privacy policies.
2. Information We Collect
We collect the following categories of information in connection with the Service.
2.1 Account and Identity Information
When you register for and maintain a ChargeCrafter account, we collect information such as your name, email address, a hashed version of your password (we do not store your password in plain text), your company or business details (such as business name, address, tax identifiers you choose to provide, and contact information), your account preferences, and any avatar or profile image you upload. If you sign in using "Sign in with Google" (OAuth), we receive basic profile and authentication information from Google to create or access your account.
2.2 Customer Data You Enter
The Service is designed for you to create, upload, store, and manage business records. This Customer Data may include information about your clients and customers, invoices, quotes and estimates, products and inventory, vendors, bills and expenses, bank and financial transactions imported through bank feeds or manual entry, and uploaded documents and receipts. Customer Data may contain personal information about third parties (for example, the names, contact details, or payment information of your own clients or vendors). You control what Customer Data you enter into the Service, and you are responsible for having the appropriate rights and legal bases to provide it to us for processing.
2.3 Billing Information
Paid ChargeCrafter subscriptions are billed through Stripe, Inc. Payment card details and similar payment credentials are collected and processed directly by Stripe as our payment processor; we do not store full payment card numbers on our systems. We retain limited subscription and billing metadata, such as your plan, subscription status, billing history references, the last four digits or card brand where provided by Stripe, and transaction identifiers, so that we can manage your subscription and provide support.
2.4 Usage and Technical Data
When you use the Service, we and our providers automatically collect certain technical information, including your IP address, device and browser type, operating system, language settings, referring and exit pages, access times, log data, and information about how you interact with the Service. We collect this information through server logs, cookies, and similar technologies as described in our Cookie Policy.
2.5 Communications and Support
When you contact us for support, respond to our service emails, or otherwise communicate with us, we collect the content of those communications and related metadata, such as your contact details and the date and subject of your message, so that we can respond and maintain records of our correspondence.
3. How We Use Information
We use the information described above for the following purposes:
- To provide and operate the Service — to create and maintain your account, deliver the accounting, invoicing, billing, reconciliation, inventory, and tax-reporting features, and store and process Customer Data on your instructions.
- Billing and subscription management — to process subscription payments through Stripe, manage your plan (including the free default plan and paid plans), issue receipts, and handle renewals, upgrades, downgrades, and cancellations.
- Security and anti-fraud — to protect the Service, detect and prevent fraud, abuse, and unauthorized access, and maintain the integrity and reliability of our systems, including through bot and abuse protection provided by Cloudflare.
- Customer support — to respond to your questions, troubleshoot issues, and improve our support.
- AI features — to provide AI-powered features such as AI invoice and receipt scanning and the in-app AI assistant. These features process only the content you submit to them, in order to return results to you.
- Product improvement — to understand how the Service is used, diagnose problems, and develop and improve features, functionality, and performance.
- Legal compliance — to comply with applicable laws, regulations, legal process, and enforceable governmental requests, and to enforce our Terms & Conditions and other agreements.
- Service communications — to send you administrative and transactional messages about your account, security notices, changes to our policies, billing notifications, and other information necessary to operate the Service.
4. Legal Bases for Processing
Where data protection laws such as the EU and UK General Data Protection Regulation apply, we rely on the following legal bases to process personal information:
- Performance of a contract — to provide the Service you have requested and to fulfill our obligations under our agreement with you.
- Legitimate interests — to secure, operate, and improve the Service, prevent fraud and abuse, and communicate with you, provided these interests are not overridden by your rights and freedoms.
- Consent — where required, for example for certain cookies, optional integrations, or optional communications; you may withdraw consent at any time.
- Legal obligation — to comply with applicable laws, including tax, accounting, and recordkeeping requirements.
For more detail about your rights and our processing under the GDPR, please see our GDPR page.
5. Controller and Processor Roles
Our role under data protection law depends on the type of data involved.
SYCONX acts as a controller for account and identity information, billing metadata, usage and technical data, and support communications relating to your use of the Service, because we determine the purposes and means of processing that information.
For the Customer Data you enter about your own clients, customers, vendors, and business records, you (the Customer) are the controller and SYCONX acts as a processor that processes such data on your behalf and in accordance with your instructions, this Privacy Policy, and our Terms & Conditions. As controller of that data, you are responsible for ensuring you have a valid legal basis to collect and provide it to us and for responding to the requests of the individuals whose data you enter, except where we are required to assist you as described in our GDPR page.
6. How We Share Information
We do not sell your personal information or the personal information contained in your Customer Data. We share information only as described below.
6.1 Subprocessors and Third-Party Service Providers
We use trusted service providers (subprocessors) to help us operate the Service. These providers process personal information on our behalf, or on your behalf where SYCONX acts as your processor, and only as necessary to perform their services. Our current subprocessors and core third-party services are:
- Amazon Web Services, Inc. (AWS) — cloud hosting, file storage (Amazon S3), and transactional email delivery (Amazon SES). Region: United States.
- Stripe, Inc. — subscription billing and payment processing for ChargeCrafter plans, and, optionally, processing of your own invoice payments where you enable it.
- OpenAI, L.L.C. — AI features, including AI invoice and receipt scanning and the in-app AI assistant; OpenAI processes only the content you submit to those features.
- Google LLC — optional "Sign in with Google" (OAuth) authentication, used only if you choose to sign in with Google.
- Cloudflare, Inc. — bot and abuse protection (Turnstile) and network security.
- Tax-rate data providers (such as TaxJar) — sales-tax rate lookup and assistance.
In addition, you may choose to enable optional connectors, which are used only when you connect them and only to the extent needed to provide the connected functionality: PayPal, Square, Adyen, Mollie, Klarna, Authorize.Net, Wise, Mercury, and Brex. When you enable an optional connector, information necessary to provide that integration is shared with the relevant provider, whose own privacy practices then apply.
6.2 Legal and Safety Disclosures
We may disclose information if we believe in good faith that doing so is necessary to comply with applicable law, regulation, legal process, or an enforceable governmental or law-enforcement request; to enforce our agreements and policies; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of SYCONX, our users, or the public.
6.3 Business Transfers
If SYCONX is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, or in the event of insolvency, personal information may be transferred as part of that transaction. We will take reasonable steps to ensure that such information remains subject to protections consistent with this Privacy Policy.
7. Cookies & Tracking
We and our providers use cookies and similar technologies to operate the Service, keep you signed in, remember preferences, secure the Service, and understand usage. You can control certain cookies through your browser and, where offered, through our cookie controls. For details about the cookies we use and your choices, please see our Cookie Policy.
8. Data Retention
We retain personal information and Customer Data for as long as your account is active and as needed to provide the Service. We also retain information as necessary to comply with our legal, tax, and accounting obligations, resolve disputes, enforce our agreements, and maintain the security and integrity of the Service.
You may delete your account at any time using the in-app "Delete account" feature (the account deletion flow). When you delete your account, we will delete or de-identify your Customer Data and personal information within a commercially reasonable period, except where we are required or permitted by law to retain certain records, or where limited information must be kept for legitimate business purposes such as fraud prevention, security, dispute resolution, or completing outstanding financial obligations. We may also retain anonymized or aggregated data that no longer identifies you.
9. Security Measures
We implement technical and organizational measures designed to protect personal information and Customer Data, including encryption of data in transit using HTTPS/TLS, hashing of passwords using bcrypt, access controls and authentication requirements, and hosting on reputable United States cloud infrastructure. We limit access to personal information to personnel and providers who need it to operate the Service.
No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for controlling access to your account.
10. International Data Transfers
SYCONX is based in the United States, and the Service and our infrastructure are operated primarily in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where we or our subprocessors operate, which may have data protection laws different from those in your jurisdiction.
Where required for transfers of personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses. For more information about international transfers and applicable safeguards, please see our GDPR page.
11. Your Rights
Depending on your location and applicable law, you may have rights regarding your personal information, including the right to access, correct, or delete it; to obtain a copy of it or request its portability (export); to object to or restrict certain processing; and to withdraw consent where processing is based on consent. Many of these actions can be performed directly within the Service, including reviewing and editing your account information and Customer Data and deleting your account.
To exercise your rights, or if you have questions about your personal information, you may contact us at support@chargecrafter.com. We will respond in accordance with applicable law. We may need to verify your identity before acting on a request. Where SYCONX acts as a processor of Customer Data on behalf of a Customer, we will direct requests from data subjects to the relevant Customer (the controller) and assist that Customer as required by law. You also have the right to lodge a complaint with a supervisory authority; further detail is provided on our GDPR page.
12. Children's Privacy
ChargeCrafter is a business product and is not directed to children. The Service is not intended for individuals under the age of 16 (or under 18 where applicable), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@chargecrafter.com so we can take appropriate action.
13. Third-Party Links & Integrations
The Service may contain links to third-party websites and may offer optional integrations and connectors that you choose to enable, including the payment providers and connectors listed in Section 6. We are not responsible for the privacy practices or content of third parties. When you enable an integration or follow a link to a third-party service, that third party's own terms and privacy policy govern your use and its handling of your information. We encourage you to review those policies before connecting or using such services.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the Service. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice through the Service or by email. Your continued use of the Service after an update takes effect constitutes your acceptance of the revised Privacy Policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:
SYCONX LLC
2 West Montauk Highway, Westhampton, NY 11977, USA
Product, support, and privacy requests: support@chargecrafter.com
General company inquiries: info@syconx.com
This Privacy Policy is governed by the laws of the State of New York, United States, and any disputes relating to it are subject to the venue provisions set out in our Terms & Conditions.
ChargeCrafter is a software tool and is not an accountant, bookkeeper, tax advisor, or law firm. It does not provide professional accounting, tax, financial, or legal advice, and you are responsible for the accuracy of your records and for your own tax and legal compliance.