Privacy
This page is a placeholder. It describes how the software currently behaves, which is not the same as a privacy policy. A real policy has to be written and reviewed — ideally by someone qualified — before this product handles other people's financial data in production.
What the software does today
- Your financial records are stored in this application's own database and scoped to your user account. Every query is filtered by your user id.
- Passwords are stored as Argon2id hashes. Sessions use HTTP-only cookies, and only a hash of the session token is persisted.
- Uploaded documents are held in private object storage and served through short-lived signed URLs. Nothing is publicly addressable.
- If you use the AI assistant, the text of your request and the figures needed to answer it are sent to the configured model provider — Google Gemini by default. If you supply your own API key, that request goes under your own account with that provider.
- Your data is not sold, and it is not used to train any model by this application. What the model provider does under its own terms is governed by its policy, not this one.
- An AI API key you store is encrypted at rest and never returned to the browser.
Still to be decided
Retention periods, data export and deletion guarantees, the legal basis for processing, any sub-processors, and the contact route for privacy requests. None of these are settled, so none are claimed here.