Privacy

What wekeep.

Tallyduck is not open yet. Today the only thing it collects is an email address for the waitlist, so that is all this notice covers.

When the product opens it will handle payment data, and this notice will be replaced by a longer one written for that before anyone connects an account. We would rather publish a short accurate notice now than a long one describing things we do not yet do.

What we collect

If you join the waitlist, we store:

• Your email address. Lowercased, because that is what lets us recognise the same address twice rather than mailing you repeatedly.
• Whether you ticked the optional updates box. A yes or a no.
• If, and only if, you ticked it: the time you did, the IP address it came from, and the exact wording shown to you at the time. We keep this because data protection law requires us to be able to show that consent was actually given, and a bare "yes" in a database proves nothing.

That is the whole list. There is no analytics script, no advertising pixel, and no third-party tracker on this site. Nothing is inferred about you, and nothing is bought about you.

Inside the product

If you have an account, we record which features get used — a sync finishing, a statement imported, an export taken, a subscription starting. Each event carries the random account identifier and nothing else. Never your email address, never a client’s name, never an amount, never your IP address.

These are sent from our server, not from your browser. There is no analytics script on any page of the product either, which means nothing is stored on your device for this and there is no banner to click. We use PostHog to hold the counts.

The reason we are allowed to is legitimate interest — knowing which parts of Tallyduck are used is how it stops being built by guesswork. That basis only holds if you can object to it, so you can: Settings → Usage data turns it off for your account entirely, and nothing else changes when you do.

Why we are allowed to

Two different reasons, kept deliberately separate.

The waitlist itself

You asked to be told when Tallyduck opens. Holding your address in order to answer that request is our legitimate interest, and it is the thing you came here to ask for.

The optional updates

Consent, and only consent. The box is unticked by default, and leaving it unticked still gets you on the waitlist. We are not allowed to make marketing a condition of the thing you actually asked for, and we have not.

Where it is stored

In Cloudflare D1, a database run by Cloudflare on our behalf. Cloudflare also serves this website and operates the anti-spam check on the form, which briefly processes your IP address to decide whether you are a robot.

The waitlist is deliberately kept in a separate system from the product database. That means unsubscribing can never accidentally delete an account, and deleting an account can never silently drop you off the list. Neither one cascades into the other.

Cloudflare, and Resend who send the mail, are American companies running servers in many countries, so your address may be handled outside the UK and the EEA. Both commit to the standard contractual clauses in their data processing agreements, which is the mechanism European law provides for exactly this. We will name the storage region here once the legal entity is registered and the accounts are in its name.

Who else sees it

Nobody. We do not sell it, rent it, share it with advertisers, or pass it to anyone else to market to you. The only companies that touch it are the ones we use to run the site and send the mail, and they act on our instructions rather than their own.

How long we keep it

Until you ask us to stop, or until it becomes clear the waitlist is not going anywhere, whichever comes first. If Tallyduck never launches, the list is deleted rather than kept.

Stopping

Every update email carries an unsubscribe link. Clicking it deletes your address rather than flagging it, so there is nothing left of it to write to. That is one click, no sign-in, no "are you sure" survey.

You can also write to us and ask, and we will do the same thing by hand.

Your rights

Depending on where you live you have some or all of the following, and we will honour them wherever you live rather than checking first:

• Ask what we hold about you, and get a copy.
• Have it corrected if it is wrong.
• Have it deleted.
• Withdraw consent for updates at any time, without it affecting anything you already received.
• Object to us holding your address at all. We rely on legitimate interest to keep you on the list, and objecting to that is your right rather than a favour we grant. Say so and the row is deleted.
• Complain to your data protection regulator if you think we have got this wrong.

There is one address in our database and it is the one you gave us, so most of these amount to the same thing: write to us and it is gone.

Children

Tallyduck is for people running a business. It is not intended for anyone under 16, and we do not knowingly keep their details.

Changes

When the product opens, this notice will be replaced with one that covers connected accounts and transaction data. If that change affects anything you have already consented to, we will tell you by email before it takes effect rather than quietly swapping the page.

Writing to us

hello@tallyduck.com reaches a person, not a queue.

Last updated 8 August 2026 · Covers the waitlist only