Privacy policy
Template. Have counsel review before launch, and fill in the operator's legal name, address, and contact.
What we collect
Your email and a hashed password. The financial records you enter or import: transactions, income, capital gains, mileage, receipts, and tax profile details. If you connect a bank or card through Plaid or SimpleFIN, transaction data those services return. We never see your bank login; it is entered on the provider's own screen.
How we use it
To categorize transactions, compute tax estimates, produce your year-end package, and run your subscription. We do not sell your data and do not use your financial records for advertising targeting.
Advertising
Free accounts see ads served by Google AdSense. Google may use cookies to serve ads based on prior visits to this or other websites. You can opt out of personalized advertising at Google Ads Settings. Paid plans show no ads.
Payments
Subscriptions are processed by Stripe. We store your Stripe customer id and subscription status, never card numbers.
Retention and deletion
Your data stays until you delete your account, which removes your ledger, receipts, and bank links immediately. Delete your account from the account page. Backups are rotated within 30 days.
Security
Passwords are hashed with scrypt. Bank aggregator credentials are stored server-side and scoped to your account. Transport is encrypted with TLS. No system is perfectly secure; keep your password unique.
Contact
[Operator name, address, email]