Privacy Policy

What we collect

Your account basics (email, name, profile photo) from the sign-in provider you choose. The bank and card statements you upload, and the transactions, categories, and recurring charges our software derives from them. Your display currency and timezone. Your chat messages with the accountant. That’s the list.

How your statements are processed

Statements are parsed by an AI model via OpenRouter. We instruct the routing to use only providers that do not retain prompts or train on your data. Your files are stored on a private volume that is not reachable from the public internet, and your ledger lives in a Postgres database on the same infrastructure (Railway, hosted in the United States). Statement content is never used to train any AI model, by us or by our processors under our instructions.

What we never do

• We never ask for, receive, or store your bank login.
• We never sell your data — the subscription is the business model.
• We never share your data with advertisers or data brokers.

Deletion — the real kind

The “Delete account & data” button (in your account area) permanently removes your account, every transaction, every uploaded statement file, briefings, and chats — immediately, with no retention window. The only thing we keep is a minimal log entry that a deletion happened.

Cookies

One kind: the session cookie that keeps you signed in (expires after 7 days). No advertising or analytics cookies.

Processors we rely on

Railway (hosting, database, and file storage), OpenRouter (AI processing under a no-retention instruction), Google (sign-in, if you choose it), Resend (transactional email, when enabled), and Stripe (payments — your card details go to Stripe directly and never touch our servers).

Your rights

Access, correction, export, and erasure — for everyone, not just where CCPA, Saudi PDPL, or UAE PDPL require it. Most of it is self-serve in the product; for anything else, email us and we will resolve it within 30 days.

Contact

Privacy questions: nascreative@gmail.com