Privacy Policy

Last updated: July 26, 2026

TallyO is a cloud-based financial dashboard for freelancers, gig workers, and independent contractors, available at tallyo.cloud. We take your privacy seriously and want to be upfront about what data we collect, how we use it, and what rights you have.

What We Collect

When you create an account and use TallyO, we collect the following information:

• Your email address and password (password is securely hashed — we never store it in plain text). If you sign up with Google instead, we receive your basic Google profile (name, email address, and profile picture) — we never access your Gmail, Drive, or any other Google data.
• Income and expense records you enter, including amounts, categories, and descriptions
• Invoice data, including client details (names and addresses), line items, and payment status
• Receipt images and files you upload
• A year-to-date business miles total you enter for the mileage deduction (plus any per-trip mileage records saved with the earlier mileage-tracking feature)
• Tax settings and preferences, such as filing status, state, dependents, W-2 income and withholding, prior-year tax figures used for safe-harbor targeting, quarterly tax payments you record, and your set-aside percentage
• An avatar you choose or upload for your account

Invoices and income records may include your clients' names and addresses. You are responsible for having the right to store that information; we process it only to provide the service to you and never use it for any other purpose.

If you use our free Hourly Rate Calculator and submit your email address, we collect: your email address, the platform you selected, the figures you entered (weekly earnings, miles, and hours), and the calculated hourly rates. This data is used to send you the requested deduction checklist and a short series of follow-up educational emails about gig worker finances.

When you sign up for a TallyO account, if you arrived from an advertising link (for example, from a Meta or Google ad), we capture the click identifiers and campaign parameters present in your URL (such as fbclid, utm_source, utm_campaign) and store them on your account record. This lets us measure which marketing channels actually bring in new users so we can spend wisely. These identifiers are not shared with third parties beyond what is described below.

What We Don't Collect

We never ask for or store:

• Bank account credentials or login information
• Social Security numbers (SSNs)
• Credit card or debit card numbers (Stripe securely handles all payment processing)

Your sensitive financial credentials stay with you. TallyO only works with the data you manually enter.

How Your Data Is Stored

Your data is stored in the cloud using Supabase, a secure platform with servers in the United States. All data is encrypted at rest and in transit. Your password is cryptographically hashed before storage. We use standard security practices to protect your information, but no system is 100% bulletproof — we do our best to keep your data safe.

Our servers also keep operational logs of requests — the endpoint you accessed, your user ID, your IP address for security-sensitive requests (such as password resets), and any errors the server encountered — so we can debug problems and detect abuse. These logs never contain passwords, payment card details, the contents of your financial records, or raw email addresses (email values are hashed before being logged). Logs are used only for debugging, security, and abuse detection.

Third-Party Services

We use the following third-party services to operate TallyO:

• Supabase — Cloud database, file storage, and authentication. Your account data, financial records, and uploaded files are stored here.
• Google (sign-in) — If you choose "Continue with Google," Google acts as your identity provider and shares your basic profile (name, email, picture) with us. We request no other Google data.
• Hostinger — Web hosting and email services (hello@tallyo.cloud).
• Meta (Facebook) advertising platform — We use this in two ways: (1) the Meta Pixel runs on our marketing pages and on the app, where it records page views, a one-time trial-start event when your trial begins, checkout-related events, and interaction events on our free calculators (viewing results, submitting the email form) — it never receives the contents of your financial records; and (2) when you complete a purchase, our server sends a corresponding event to Meta's Conversions API, including a hashed (one-way) version of your email address along with the event type and a transaction reference — never raw financial transaction data, the contents of your records, or your password. These events are used solely for advertising attribution and reporting.
• Google Analytics — Traffic analytics to help us understand how people use our site and app.
• Stripe — Payment processing for TallyO subscriptions. Card details are collected only if you upgrade, directly by Stripe — we never store your card details. Stripe receives your email address and an internal account identifier to link your subscription.
• Anthropic (optional, Pro) — If you enable the AI Setup Guide, the messages you type in that chat (which may include financial details you choose to share) are sent to Anthropic's Claude API using your own Anthropic API key, which we store on the server for your account. We never automatically send your financial records to Anthropic — only the chat conversation itself. On our no-account demo page, the AI guide calls Anthropic directly from your browser with a key you provide there; that key and chat never reach TallyO's servers.
• Content delivery — Our pages load fonts and scripts from Google Fonts, jsDelivr, Google, and Meta. Like any web request, these providers receive your IP address and browser information when serving those files.

We do not sell, rent, or share your personal financial data with any third parties. The services listed above only receive the minimum data necessary to perform their functions.

Cookies and Tracking

We use cookies and similar browser technologies for the following purposes:

• Sign-in — Your session tokens are kept in your browser's localStorage (not a cookie) to keep you logged in while you use TallyO. This is required for the app to function.
• Analytics & advertising — Google Analytics and the Meta Pixel set cookies on our pages — including our marketing pages and the app dashboard — to help us understand traffic sources and measure advertising.

You can block or clear analytics and advertising cookies in your browser settings without affecting your ability to use TallyO.

Email Communications

As a TallyO account holder, you may receive:

• A password reset email when you request one (sent only if you initiate the request from the sign-in page)
• A monthly check-in email asking about your experience
• Important service announcements, such as changes to terms or pricing

If you submit your email via our free calculator, you will receive: the deduction checklist you requested, and a short series of two follow-up emails with tax tips for gig workers.

Every marketing email we send includes a one-click unsubscribe link. You can also opt out of the monthly check-in, calculator follow-ups, and any other non-essential email at any time by replying to the email or writing hello@tallyo.cloud. We will never send you spam or share your email address with third-party marketers for their own use (the hashed-email advertising-attribution events sent to Meta are described above).

Your Rights

You have the right to:

• Export all of your data at any time
• Request deletion of your account and all associated data
• Know what data we hold about you
• Opt out of non-essential email communications
• Request correction of inaccurate data

If you want to exercise any of these rights, email us and we'll take care of it promptly.

Data Retention and Deletion

We retain your data for as long as your account is active. When you delete your account (available in the app at any time), everything goes at once: your financial records — income, expenses, invoices, mileage, categories, and settings — your uploaded files (receipts, photos, avatars), your sign-in identity, and any calculator or waitlist entries under your email address are deleted immediately. Any active paid subscription is canceled and your customer record at our payment processor is deleted — you will not be charged again. Residual copies in routine platform backups age out within 30 days. Receipts you remove from individual expenses are held for a 90-day recovery window before being purged from our primary storage. We may retain anonymized, aggregated data (such as total user counts) that cannot be linked back to you. Inactive accounts may be deleted after 12 months of inactivity, following email notice.

Contact Us

If you have any questions about this privacy policy or your data, reach out to us at:

hello@tallyo.cloud