Privacy Policy

Last updated: 13 October 2026

FORT INDUSTRIES LIMITED, trading as Tokchart, is responsible for the personal data described in this notice. Contact us at [email protected] about privacy or your rights.

Information we use and why

• Accounts and services: your name, email, sign-in details, account settings and requested reports help us create your account, provide your subscription and respond to support requests. We process these to perform our contract with you or take steps you request before a contract.
• Payments: payment providers process payment details. We receive customer, subscription and transaction references, payment status, amounts, currency and refund information to supply purchases, manage subscriptions, keep accounting records and meet legal obligations. We do not need your full card number for analytics.
• Security and reliability: technical logs, request details, IP addresses and error reports help us prevent misuse, investigate faults and protect the service. Our legitimate interests are operating a secure, reliable service; we limit this information to what is needed.
• Optional analytics and A/B tests: if you agree, we use a random browser identifier and, when signed in, a pseudonymous account identifier to measure page visits, the interface variant you actually see, and resulting purchases, renewals, refunds and chargebacks. We use PostHog to compare variants using revenue after payment-provider fees. We do not send your name, email, advertising identifiers, card details or page query strings through this analytics integration. With the same consent we record anonymised session replays of page interactions, with form inputs masked, to improve the interface. Automatic form/click capture and query-string collection are disabled.
• Optional marketing attribution: if you agree, we record first and recent campaign visits, referrer and landing-page paths, UTM campaign parameters and available advertising/browser identifiers. These can include Google click IDs (gclid, gbraid, wbraid, dclid), Meta identifiers (fbclid, _fbp, _fbc), Microsoft, TikTok, X and LinkedIn click IDs, and Google Analytics client/session identifiers already present in your browser. We use these to understand which campaigns lead to purchases. We do not create missing identifiers or upload these identifiers to advertising platforms through this integration.
• Email updates: where you separately subscribe to marketing emails, we use your email and preferences to send them. You can unsubscribe using the link in an email. Cookie choices do not subscribe you to email marketing.

Google sign-in, where used, supplies account information needed to authenticate you. Its account identifier is separate from Google advertising click or analytics identifiers.

Your tracking choices

We ask for consent before optional analytics or marketing attribution. You can reject either without losing access to purchases or your account. Use Cookie settings at any time to change your choices or withdraw consent. We ask again after 90 days. A recognised Global Privacy Control signal disables this optional tracking.

Withdrawal stops future optional collection and queued analytics exports covered by that consent. It does not make earlier lawful processing unlawful or delete accounting records. Contact us if you also want existing personal analytics data erased. We do not infer historical tracking consent from a purchase, and do not invent historical experiment assignments.

See our Cookie Policy for storage details. Advertising services, where offered, include Google AdSense and have additional vendor consent controls through our advertising consent platform; agreeing to Tokchart's marketing attribution does not by itself permit personalised advertising.

Who receives information

We use service providers for hosting, delivery and security (including Cloudflare), email, error monitoring (Honeybadger), payments (Paddle and, for legacy subscriptions, Stripe), and consented analytics (PostHog). They receive information necessary for their services. Payment providers may also act as independent controllers for payment processing, fraud prevention and their legal obligations; their privacy notices apply to those activities.

Paddle's browser payment integration includes Retain/ProfitWell. We load it for checkout, requested subscription cancellation and Paddle payment or recovery links, rather than ordinary browsing. We do not identify your account to enable passive Retain engagement tracking. For details of Paddle's processing, see Paddle's privacy notice.

Our PostHog project is hosted in the EU. Some providers or their support teams may process information in other countries. Where a restricted international transfer is involved, applicable safeguards must be in place, such as an adequacy decision or approved contractual safeguards. Contact us for information about the safeguards applicable to your data.

We may disclose relevant information where required by law, to protect legal rights, or as part of a business transfer with appropriate safeguards and notices. We do not sell personal information for money. Advertising-related sharing, where offered, is governed by the applicable advertising consent choices and privacy notices.

How long we keep information

We keep account and service records while needed to provide the service and handle support, disputes and legal obligations. Financial records may need to be retained after account closure for applicable accounting and tax requirements.

Our first-party campaign attribution records are removed after 90 days without an update. Consent choices last 90 days; evidence of those choices is retained for up to one year after expiry. Processed webhook payloads are removed after 30 days. Local experiment and revenue delivery records are retained for up to 13 months so refunds and retries can be reconciled. Backups expire through their normal backup lifecycle. PostHog's event query window depends on the plan (currently seven years on pay-as-you-go); that window is not automatic deletion. Identifiable analytics records may remain stored until erased. Contact us to request access or erasure, and we review ongoing retention when an experiment or account no longer needs identifiable data.

Your rights

Depending on the applicable law and circumstances, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent. We may need to verify your identity. We normally respond within one month under UK/EU data protection law; lawful extensions may apply. Access requests are normally free.

If California privacy law applies to you and our processing, it may also give you rights to know, correct or delete information and opt out of sale or sharing, without discrimination. Contact us or use Cookie settings to exercise the relevant choices.

You can complain to the UK Information Commissioner's Office or your local supervisory authority. You can contact us first, but do not have to.

Changes and security

We use access controls and other appropriate technical and organisational safeguards. No system can guarantee absolute security. We update this notice when our processing changes and provide further notice where required. A new tracking purpose requires a new choice where consent is needed.