Privacy Policy

Privacy Policy

Effective Date: 01 October 2026 Version: 1.0 Product: ChequePilot Provider: DesignMUSTER Technologies Territory: Worldwide

1. Introduction

This Privacy Policy explains how DesignMUSTER Technologies collects, uses, stores, protects, shares, and otherwise processes personal information in connection with ChequePilot.

ChequePilot is a software-as-a-service platform that provides cheque management, cheque preparation, cheque printing, cheque templates, bank and payee records, printing configuration, subscription management, administrative tools, and related services.

By using ChequePilot, you acknowledge that personal information may be processed in accordance with this Privacy Policy and applicable law.

2. Scope

This Privacy Policy applies to personal information processed through:

• ChequePilot web application
• ChequePilot website
• User accounts
• Workspaces
• Administrative interfaces
• Subscription and billing processes
• Support communications
• Security and audit logs
• Related ChequePilot services and features

This Privacy Policy does not apply to independent third-party websites, services, banks, payment processors, or other external services that maintain their own privacy policies.

3. Information We May Collect

Depending on how ChequePilot is used, we may collect or process the following categories of information.

3.1 Account Information

This may include:

• Full name
• Email address
• User ID
• Account status
• Login information
• Account creation date
• Last sign-in date
• Workspace membership
• User role
• Administrative status
• Profile settings

3.2 Company and Workspace Information

This may include:

• Company or organization name
• Workspace name
• Business contact information
• Workspace ownership
• Team memberships
• User roles
• Internal permissions
• Subscription plan
• Account limits
• Business settings

3.3 Bank and Cheque Information

Users may choose to enter or upload information relating to cheque operations.

This may include:

• Bank name
• Bank account labels
• Cheque numbers
• Cheque dates
• Payee or beneficiary names
• Cheque amounts
• Amounts in words
• Currency
• Reference numbers
• Memo or remarks
• Cheque status
• Printing history
• Template information
• Printer profiles
• Cheque dimensions
• Print-position settings

ChequePilot processes this information to provide the functionality requested by the user.

3.4 Payee Information

Users may store payee or beneficiary information.

This may include:

• Payee name
• Company name
• Internal reference information
• User-entered notes
• Other information entered by the customer

The user is responsible for ensuring that they have lawful authority to enter and process information relating to third parties.

3.5 Templates and Uploaded Content

Users may upload or create content including:

• Cheque images
• Template backgrounds
• Signatures
• Stamp images
• Logos
• Uploaded documents
• Spreadsheet files
• Imported cheque records

Users are responsible for ensuring that they have the legal right and authorization to upload and use such content.

3.6 Subscription and Billing Information

We may process:

• Subscription plan
• Billing interval
• Transaction status
• Payment references
• Invoice references
• Currency
• Payment dates
• Refund status
• Subscription status
• Renewal status

Full payment-card information may be processed directly by third-party payment providers such as Stripe.

ChequePilot generally does not need to store complete payment-card credentials where payment processing is handled directly by the payment provider.

3.7 Technical Information

We may automatically process technical information including:

• IP address
• Browser type
• Operating system
• Device information
• Session information
• Login activity
• Request logs
• Error logs
• Security events
• Performance data
• Network information
• User-agent information
• Application version
• Authentication activity

3.8 Usage Information

We may process information about how users interact with the Service, including:

• Pages visited
• Features used
• Print actions
• Administrative actions
• Settings changes
• Subscription actions
• Login activity
• Security events
• Feature usage
• System errors

This information may be used to operate, secure, troubleshoot, maintain, and improve the Service.

3.9 Communications

If users contact DesignMUSTER Technologies, we may process:

• Email address
• Name
• Support messages
• Complaint details
• Billing questions
• Technical support information
• Attachments
• Communication history

4. Information We Do Not Intentionally Require

ChequePilot is not designed to require highly sensitive personal information unless it is specifically necessary for a user-controlled business process.

Users should not upload unnecessary sensitive information.

Examples of information that should not be uploaded unless lawfully required include:

• Government identification numbers
• Medical records
• Biometric information
• Unrelated financial credentials
• Passwords for third-party services
• Private keys
• Unnecessary confidential personal information

5. How We Use Information

We may process information for purposes including:

• Providing ChequePilot
• Creating and maintaining user accounts
• Authenticating users
• Managing workspaces
• Providing cheque-management features
• Generating previews
• Supporting printing workflows
• Processing subscriptions
• Managing plan limits
• Processing refunds
• Providing customer support
• Preventing fraud
• Detecting abuse
• Protecting accounts
• Monitoring service reliability
• Troubleshooting
• Maintaining audit logs
• Improving product functionality
• Complying with legal obligations
• Responding to lawful requests
• Enforcing contractual rights
• Protecting users and the Service

6. Legal Bases for Processing

Depending on the jurisdiction and circumstances, personal information may be processed based on one or more of the following:

• Performance of a contract
• Steps requested before entering into a contract
• Legitimate business interests
• Compliance with legal obligations
• User consent
• Protection of legal rights
• Fraud prevention
• Security
• Other lawful bases recognized by applicable law

Where consent is the appropriate legal basis, users may have the right to withdraw consent, subject to applicable law.

7. Business Customer Responsibility

ChequePilot may be used by organizations to process information relating to employees, payees, suppliers, customers, or other individuals.

Where a business customer determines why and how such information is processed, that customer may act as the data controller or equivalent responsible organization under applicable law.

DesignMUSTER Technologies may act as a processor or service provider when processing such information on the customer's instructions.

Business customers are responsible for:

• Having a lawful basis for processing personal information
• Providing required privacy notices
• Obtaining required consent where applicable
• Controlling employee access
• Maintaining appropriate internal permissions
• Responding to data-subject requests where legally required
• Using ChequePilot lawfully

8. Payment Processing

ChequePilot may use third-party payment processors such as Stripe.

Payment processors may collect and process:

• Card details
• Billing information
• Payment identifiers
• Fraud-detection information
• Transaction information

Payment providers process information according to their own terms and privacy policies.

DesignMUSTER Technologies may receive limited payment information such as:

• Customer identifier
• Subscription identifier
• Transaction status
• Payment amount
• Currency
• Invoice information
• Refund status

9. Service Providers

DesignMUSTER Technologies may use third-party providers to support ChequePilot.

These providers may include services for:

• Hosting
• Databases
• Authentication
• Payment processing
• Email delivery
• Monitoring
• Security
• Networking
• Cloud storage
• Error reporting
• Analytics
• Domain and infrastructure services

Service providers may process information only to the extent necessary to provide their services and subject to applicable contractual and legal obligations.

10. International Data Processing

ChequePilot may be used worldwide.

Service providers, infrastructure, databases, and support systems may operate in different countries.

As a result, information may be processed or transferred outside the country where the user is located.

Where applicable law requires safeguards for international transfers, DesignMUSTER Technologies will use reasonable measures intended to meet those requirements.

Such measures may include:

• Contractual safeguards
• Approved transfer mechanisms
• Provider security commitments
• Other legally recognized protections

11. Data Location

The physical location of data may depend on:

• Hosting provider
• Database region
• Backup infrastructure
• Authentication provider
• Service-provider architecture
• Operational requirements

DesignMUSTER Technologies may select or change infrastructure locations in order to maintain security, reliability, performance, or legal compliance.

12. Data Security

DesignMUSTER Technologies uses reasonable technical and organizational measures intended to protect information.

Measures may include:

• Authentication
• Role-based access
• Access controls
• Encryption where appropriate
• Secure network connections
• Logging
• Audit trails
• Infrastructure security
• Monitoring
• Backups
• Software updates
• Security reviews
• Restricted administrative access

However, no method of internet transmission, storage, cloud hosting, database operation, authentication, or software security can guarantee absolute security.

13. Security Incidents

Potential risks may include:

• Hacking
• Malware
• Credential theft
• Phishing
• Unauthorized access
• Cyberattacks
• Hosting compromise
• Database compromise
• Third-party vulnerabilities
• Network attacks
• Distributed denial-of-service attacks
• Software vulnerabilities
• Social engineering

Where DesignMUSTER Technologies becomes aware of a security incident, it may take appropriate actions including:

• Investigation
• Containment
• Remediation
• Credential revocation
• Access suspension
• User notification where required
• Regulatory notification where required
• Cooperation with lawful authorities

14. User Security Responsibilities

Users are responsible for:

• Protecting account passwords
• Protecting email accounts
• Protecting devices
• Logging out of shared devices
• Maintaining appropriate team permissions
• Preventing unauthorized account use
• Reporting suspected compromise
• Using reasonable security practices

DesignMUSTER Technologies is not responsible for unauthorized access caused by user credential sharing, user negligence, compromised user devices, or failures outside DesignMUSTER Technologies' reasonable control, except where applicable law requires otherwise.

15. Data Retention

DesignMUSTER Technologies may retain information for as long as reasonably necessary for:

• Providing the Service
• Maintaining accounts
• Managing subscriptions
• Security
• Fraud prevention
• Audit purposes
• Legal compliance
• Financial records
• Tax obligations
• Dispute resolution
• Enforcement of agreements
• Backup and disaster recovery

Retention periods may vary depending on the type of information and applicable legal requirements.

16. Deleted Accounts

When an account or workspace is deleted, some information may be removed, anonymized, or retained depending on:

• Legal obligations
• Financial-record requirements
• Security requirements
• Fraud prevention
• Backup schedules
• Dispute requirements
• Technical limitations
• Applicable law

Deletion from active systems may not result in immediate deletion from backup systems.

Backups may be overwritten according to normal retention schedules.

17. Cheque and Transaction Records

Business, cheque, audit, billing, or related records may need to be retained for legitimate business, accounting, dispute, fraud-prevention, or legal reasons.

A request to delete an account does not necessarily require immediate deletion of every record where retention is legally permitted or required.

18. Data Access

Subject to applicable law, users may have the right to request information about personal data held about them.

Requests may require identity verification.

DesignMUSTER Technologies may refuse or limit a request where permitted by law, including where necessary to:

• Protect another person's rights
• Protect security
• Prevent fraud
• Comply with law
• Protect confidential business information
• Preserve legal claims

19. Data Correction

Users may update certain account information directly through ChequePilot.

Where direct editing is unavailable, users may contact DesignMUSTER Technologies to request correction of inaccurate personal information.

20. Data Deletion

Subject to applicable law, users may request deletion of certain personal information.

Deletion rights may be limited where information must be retained for:

• Legal obligations
• Tax obligations
• Financial records
• Fraud prevention
• Security
• Legal claims
• Contract enforcement
• Other lawful purposes

21. Data Portability

Where required by applicable law, users may have the right to receive certain personal information in a structured, commonly used, machine-readable format.

Availability may depend on:

• Type of data
• Technical feasibility
• Applicable law
• User authorization

22. Restriction and Objection

Where applicable law provides such rights, users may request restriction of processing or object to certain processing.

These rights are subject to applicable legal exceptions.

23. Withdrawal of Consent

Where processing is based on consent, users may withdraw consent where legally permitted.

Withdrawal does not affect the lawfulness of processing performed before withdrawal.

Some Service functionality may not be available where required processing permission is withdrawn.

24. Automated Processing

ChequePilot may use automated software processes to provide functionality such as:

• Validation
• Formatting
• Data processing
• Duplicate detection
• Usage-limit enforcement
• Security monitoring
• Fraud detection

ChequePilot is not intended to make legally binding credit, lending, banking, employment, insurance, or similar decisions about individuals solely through automated processing.

25. Cookies and Similar Technologies

The ChequePilot website or application may use cookies or similar technologies for:

• Authentication
• Session management
• Security
• Preferences
• Performance
• Analytics
• Feature functionality

Where legally required, users may be provided with choices regarding non-essential cookies.

26. Essential Cookies

Certain cookies or similar technologies may be necessary for:

• Login
• Authentication
• Security
• Account sessions
• Fraud prevention
• Application functionality

Disabling essential technologies may prevent ChequePilot from functioning properly.

27. Analytics

ChequePilot may use analytics to understand product performance and usage.

Analytics may include information such as:

• Feature usage
• Page visits
• Performance
• Errors
• Device type
• General technical information

Where legally required, non-essential analytics will be handled according to applicable consent requirements.

28. Marketing Communications

DesignMUSTER Technologies may send marketing communications where permitted by law.

Users may have the ability to unsubscribe from marketing messages.

Service-related communications may still be sent where necessary for:

• Security
• Billing
• Account status
• Legal notices
• Service operation
• Important product changes

29. Transactional Communications

Users may receive necessary transactional messages, including:

• Account verification
• Password reset
• Subscription notices
• Billing notices
• Refund confirmations
• Security alerts
• Service notifications

Such communications may be necessary to operate the Service.

30. Children

ChequePilot is intended for business and adult users.

The Service is not knowingly designed for children below the minimum age required to enter into contracts or use business software in the relevant jurisdiction.

If DesignMUSTER Technologies becomes aware that personal information was unlawfully collected from a child, appropriate action may be taken.

31. Fraud Prevention

Information may be processed to:

• Detect fraud
• Prevent abuse
• Investigate suspicious activity
• Protect users
• Protect DesignMUSTER Technologies
• Protect payment systems
• Enforce legal rights

This may involve analysis of account activity, IP information, billing events, authentication activity, or other security indicators.

32. Legal Requests

DesignMUSTER Technologies may disclose information where required or permitted by law, including in response to:

• Court orders
• Government requests
• Regulatory requests
• Law-enforcement requests
• Legal proceedings
• Fraud investigations
• Security investigations

Requests may be reviewed for legal validity where appropriate.

33. Protection of Rights

Information may be used or disclosed where reasonably necessary to:

• Protect DesignMUSTER Technologies
• Protect ChequePilot
• Protect users
• Enforce agreements
• Prevent fraud
• Protect security
• Investigate wrongdoing
• Defend legal claims

34. Business Transfers

If DesignMUSTER Technologies undergoes a:

• Merger
• Acquisition
• Restructuring
• Financing
• Sale
• Transfer of assets
• Business reorganization

information may be transferred as part of that transaction, subject to applicable law.

35. No Sale of Personal Information

DesignMUSTER Technologies does not intend to sell personal information as a core business model.

Where applicable law defines "sale" or "sharing" broadly, rights will be handled according to applicable legal requirements.

36. Customer-Controlled Information

Business customers may enter information into ChequePilot that DesignMUSTER Technologies does not independently select.

The customer remains responsible for determining:

• Which information is entered
• Whether processing is lawful
• Who receives access
• How long information should be retained
• Whether data-subject notices are required

37. Signatures and Stamp Images

ChequePilot may allow users to upload signatures, stamps, seals, or similar images.

Such content may be sensitive from a business-security perspective.

Users are responsible for:

• Having authorization to upload it
• Controlling access
• Managing user permissions
• Preventing misuse
• Removing access when no longer required

DesignMUSTER Technologies does not independently verify authority to use a signature or stamp.

38. Bank Information

ChequePilot may store bank-related business configuration information.

Users should not enter internet-banking passwords, PINs, security codes, private keys, or other authentication secrets into fields not specifically designed for such information.

ChequePilot does not require online-banking credentials to provide its standard cheque-management functionality.

39. Payment-Card Security

Where payment information is handled by Stripe or another external payment provider, card information may be transmitted directly to that provider.

Users should not enter payment-card numbers into ordinary ChequePilot notes or unrelated application fields.

40. Third-Party Links

ChequePilot may contain links to third-party websites or services.

DesignMUSTER Technologies is not responsible for the privacy practices of independent third parties.

Users should review the applicable third-party privacy policy before providing information.

41. Worldwide Availability

ChequePilot may be used worldwide.

Privacy and data-protection rights vary by jurisdiction.

DesignMUSTER Technologies intends to handle personal information in accordance with applicable laws that apply to its processing activities.

Mandatory local legal rights remain unaffected.

42. European Economic Area and Similar Jurisdictions

Where data-protection laws such as the GDPR or similar laws apply, individuals may have rights including:

• Access
• Correction
• Erasure
• Restriction
• Objection
• Portability
• Withdrawal of consent
• Complaint to a competent authority

Such rights are subject to the conditions and exceptions provided by applicable law.

43. United Kingdom

Where United Kingdom data-protection law applies, personal information will be handled according to applicable UK privacy and data-protection requirements.

Users may have rights similar to those described above, subject to applicable law.

44. United Arab Emirates

Where United Arab Emirates data-protection requirements apply, DesignMUSTER Technologies will process personal information in accordance with applicable UAE legal requirements.

This may include obligations relating to:

• Lawful processing
• Security
• Data-subject rights
• International transfers
• Confidentiality
• Incident management

45. United States

Privacy rights in the United States may vary by state.

Where applicable state privacy laws provide rights to users, DesignMUSTER Technologies will respond to valid requests according to applicable law.

46. Complaints

Users may contact DesignMUSTER Technologies with privacy concerns.

Where applicable law provides a right to complain to a regulator or supervisory authority, nothing in this Privacy Policy removes that right.

47. Privacy Requests

Privacy requests may include:

• Access
• Correction
• Deletion
• Restriction
• Objection
• Portability
• Consent withdrawal

DesignMUSTER Technologies may require reasonable identity verification before completing a request.

48. Security Verification

To protect user information, DesignMUSTER Technologies may request information reasonably necessary to verify identity or authority before fulfilling a privacy request.

49. Authorized Representatives

Where applicable law permits a user to appoint an authorized representative, DesignMUSTER Technologies may require evidence that the representative has authority to act for the user.

50. Response Times

DesignMUSTER Technologies aims to respond to valid privacy requests within the time required by applicable law.

Complex requests may require additional time where legally permitted.

51. Changes to This Privacy Policy

DesignMUSTER Technologies may update this Privacy Policy to reflect:

• Changes to ChequePilot
• New features
• Legal requirements
• Regulatory developments
• Security practices
• Service providers
• Operational changes

The updated version will include a revised effective date or version number.

Where required by law, users may be notified or asked to provide renewed consent.

52. Electronic Records

ChequePilot may retain electronic records relating to:

• Policy versions
• Acceptance
• Consent
• User identity
• Workspace
• Date and time
• Relevant audit information

These records may be used for legal, security, operational, and compliance purposes.

53. Relationship With Other Policies

This Privacy Policy should be read together with:

• Terms of Service
• Refund & Cancellation Policy
• Subscription & Billing Policy
• Printing & Cheque Use Disclaimer
• Other applicable ChequePilot policies

If there is a conflict, mandatory applicable law will take priority.

54. Data Protection Commitment

DesignMUSTER Technologies aims to use personal information responsibly, proportionately, securely, and only for legitimate purposes connected with operating ChequePilot and the Company's lawful business activities.

Users should also use ChequePilot responsibly and avoid entering information that is unnecessary for the intended business process.

55. Contact

ChequePilot DesignMUSTER Technologies

For privacy, data-protection, security, legal, or compliance enquiries, please use the official contact information published on the ChequePilot website.

END OF PRIVACY POLICY