What’s true about how the product handles your data today, while the formal policy is with counsel.
Placeholder, pending review by aviation counsel. Nothing on this page is a binding privacy commitment. V1 has not yet published a Privacy Policy, and no version of this text has been reviewed or approved.
A few facts about how the product handles data today, ahead of the policy that will formally cover them:
Data processors: Supabase (database, file storage, and sign-in), Vercel (hosting), Stripe (billing and client payment links), and Resend (account email).
Receipts you upload are stored in a private file bucket, scoped to your account.
Receipt scanning runs in your own browser, not on a server: a receipt image is never uploaded just to be read.
Bank statement files are read and parsed in your own browser too. The transactions reach us when you confirm the import; the statement file itself is never uploaded, only its name and row count.
This is not the complete policy. It does not yet address data retention, deletion, or every detail a full policy has to cover. That text is pending counsel review.
