Privacy Policy

1. What we collect

We collect information you provide directly: your name, email address, and password when you register. When you upload a CSV file, the transaction data within that file is stored securely in our database and associated with your account.

2. How we use your data

• · To provide the InsightStack analytics service, including AI-generated spending insights.
• · To send transactional emails (password resets, account notifications) via SendGrid.
• · To improve the platform through aggregated, anonymised usage metrics.

3. AI processing & PII

Before any transaction data is processed by the FinanceAI engine, personally identifiable information (names, account numbers, reference codes) is redacted server-side. All AI analysis runs in-process — your data is never sent to any external AI service. We do not share identifiable financial data with third parties for advertising or profiling purposes.

4. Data storage & security

Data is stored in a PostgreSQL database hosted on Neon (Vercel Postgres). Passwords are hashed with bcrypt. All data is transmitted over HTTPS/TLS. Access tokens are short-lived JWTs. We apply rate limiting and CSRF protection across all mutating endpoints.

5. Your rights

You can delete your account and all associated data at any time by contacting us at bholeanish3@gmail.com. We will action deletion requests within 30 days.

6. Cookies

We use a single session cookie to maintain your authenticated state. We do not use advertising cookies or third-party tracking scripts.

7. Contact

Questions about this policy? Email bholeanish3@gmail.com.