Privacy Policy
<!-- Canonical source for build-time rendering. -->Effective Date: January 26, 2026
1. Data Storage & Privacy
Selected PDFs are encrypted in the browser's local queue before sign-in. During processing, a temporary copy is uploaded to Vercel Blob and sent to the Gemini File API. After a job completes or fails, the worker requests deletion of both provider copies. Because deletion is performed through provider APIs, it may not be instantaneous if a provider or cleanup request is unavailable.
Extracted transaction data is stored locally in your browser. The application clears its local database when it receives a completed sign-out event; clearing this site's browser data also removes it.
2. AI Processing & Categorization
To extract and suggest categories, statements are transferred through authenticated HTTPS requests for temporary processing with Vercel and the Gemini File API. Gemini returns transaction fields for human review. The worker requests file deletion during both success and failure cleanup. Temporary job status and extracted-result caches in Redis expire after 1 hour.
3. Information We Collect
- Account Info: Email address and name provided during sign-up.
- Transaction Data: Extracted transaction details and AI-generated categories required to display your dashboard.
- Usage Metrics: Number of pages processed to manage tier limits.
- Analytics: Anonymous technical data collected via Vercel Analytics and Sentry.
4. Data Security
We use industry-standard SSL/TLS encryption for all data transport. Access to account metadata is restricted and protected via Supabase Auth.