Privacy Policy

Effective date: October 1, 2026

CashWatchdog ("we", "us") is run by Pierce Rowe, a sole proprietor in Fort Wayne, Indiana. CashWatchdog, at cashwatchdog.com, currently emails businesses a daily alert when a QuickBooks invoice goes unpaid past its due date. Google Ads budget alerts are not offered until that integration is approved and opened. This policy explains what we collect, why, and the choices you have.

What we collect

When you join the waitlist: your email address, and which of Google Ads and QuickBooks you tell us you use.

When you subscribe: your email address and payment details, collected by our payment processor, Stripe. We receive your email address, Stripe customer and subscription IDs, and your subscription status. We never see or store your full card number. You can change the address your alerts go to on your account page; the new address has to confirm the change first. If you add extra alert recipients on your account page, we keep their addresses to send them your alerts; each one is told they were added and can stop the emails themselves.

If Google Ads alerts are offered and you connect Google Ads (only with your permission): the IDs and names of the ad accounts your Google login can access and, for each enabled campaign, its name, its budget and the previous day's spend. We store an encrypted token that lets us read this once a day.

When you connect QuickBooks (only with your permission): each connected company's name and ID (one company on most plans, up to 10 on the Bookkeeper plan). Once a day we ask QuickBooks, for each of those companies, for your unpaid invoices that are past their due date, and for a count of your unpaid invoices. QuickBooks sends each of those invoices back as a whole record. We use what an alert needs (the invoice number, customer name, amount due, due date, currency, and whether QuickBooks shows it as sent), and none of it is saved in our database. We store an encrypted token for each company that lets us read this once a day.

When you use the free check (no account needed): your company's name, the same invoice details and a count of your unpaid invoices, read once to show you the result in your own browser. We attempt to revoke our access at Intuit straight away. No invoice result or connection key is saved in our database and no account is created. The encrypted result cookie lasts ten minutes. Operational logs and aggregate usage counts still apply. If revocation cannot be confirmed, remove CashWatchdog in QuickBooks' connected apps to confirm access is cut off.

Automatically: our hosting provider keeps standard request logs (such as IP address, browser type and the page requested) for security and troubleshooting. When a check, a connection or a page fails, we log the error (which customer it affected, if any, the page address without its parameters, and the error message and reference number from Google or Intuit) so we can fix it. We also count page visits, free-tool uses and answers to optional questions on the site as daily totals that identify no one. To slow automated waitlist abuse, we use a keyed one-way fingerprint of the submitting IP address in an expiring rate-limit record; the raw address is not stored by us for that limit, the record stops counting after one hour, and expired records are purged as waitlist traffic arrives. We set a few functional cookies: short-lived ones during checkout and while you connect an account, to make sure the person who starts each step is the person who finishes it, and a sign-in cookie for your account page that lasts up to 12 hours. We don't use advertising or analytics cookies.

How we use it

• To check your connected accounts and email you alerts, connection reminders and messages about the service.
• To bill you and manage your subscription.
• To keep the service secure and working.

We don't sell your information, and we don't use it for advertising.

Google user data

CashWatchdog's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google Ads data only to provide the budget alerts you signed up for.
• We don't transfer it to anyone except as needed to provide those alerts (for example, to send the alert email), for security, or to comply with the law.
• We don't use it for advertising, and we don't sell it.
• No person reads it unless you ask us to (for support), it's needed for security, or the law requires it.

Google's permission for Google Ads also allows making changes, but we only read data. We never change your campaigns, budgets or settings.

Who we share it with

Service providers that process data for us, each under its own privacy terms:

• Stripe for payments
• Vercel for hosting
• Neon for our database
• GitHub to store our encrypted nightly database backups
• Resend for sending email
• Google and Intuit, only to fetch the data you chose to connect

We may also disclose information when the law requires it, or as part of a sale or merger of the business, in which case we'll tell you first.

How long we keep it

• Account and billing records: while you're a customer, and afterwards for as long as accounting and legal requirements need.
• Access to your connected accounts: we attempt revocation with Google or Intuit and delete our saved keys as soon as your subscription ends, even if provider revocation cannot be confirmed. You can remove access sooner by asking us, or by removing our access in your Google account (myaccount.google.com/permissions) or in QuickBooks.
• Alert identity records (IDs and dates, no amounts or names), kept to limit repeated alerts. The initial overdue alert and 30-day reminder are separate.
• Error logs: 90 days.
• Database backups: an encrypted copy of our database is made each night and kept for 30 days, so anything deleted from the service is also gone from backups within 30 days.
• Waitlist entries: until you ask to be removed.

Security

Account-access tokens are encrypted at rest, and all traffic to and from the service is encrypted in transit. Only the parts of the service that need your data can reach it. No system is perfectly secure, but we work to protect yours and will tell you promptly if a breach affects you.

Your choices and rights

• Cancel anytime at cashwatchdog.com/manage.
• Ask us to see, correct or delete your information, or to take you off the waitlist, by emailing piercearowe@gmail.com.
• Depending on where you live (for example California, the EU or the UK), you may have more rights over your data. Contact us and we'll respond within the time the law requires.

Children

The service is for businesses and isn't directed at anyone under 18.

Changes

We'll post any changes on this page and update the effective date. If a change is significant, we'll email customers before it takes effect.

Contact

CashWatchdog (Pierce Rowe) · 6788 Coldstream Ct, Fort Wayne, IN 46835 · piercearowe@gmail.com