Privacy policy

We store your bank transactions so we can calculate your tax estimate. That is the only reason we store them. We do not sell your data, we do not share it with advertisers, and we never see your bank login credentials.

Your email address, so you can sign in. We use magic links, so we never hold a password for you.

Your tax profile — filing status, state of residence, business structure, and whether you also have a W-2 job. These are the inputs to the calculation.

Your bank transactions, retrieved through Plaid: the date, amount, description, and merchant name of each transaction, plus whether you or our classifier marked it as business income.

Your bank login credentials. Plaid authenticates you directly with your bank. Your username and password never reach our servers, so they cannot leak from them.

Your account and routing numbers. We request only Plaid’s Transactions product. We do not request Auth or Transfer, which means we have no technical capability to move money and no access to the details you would need in order to.

The token that lets us read your transactions is encrypted at rest and never appears in logs, in error messages, or in anything sent to your browser. Transaction data is stored in an access-controlled database and is only ever queried on your behalf.

We do not sell your data. We do not share it with advertisers, data brokers, or affiliates. We do not use your transactions to train models sold to anyone else.

Both live in Settings. Disconnecting a bank account revokes our access at Plaid immediately — the token stops working, not just our record of it — and deletes the stored transactions for that account. Deleting your account removes your profile, your transaction history, and every estimate we calculated from it, and revokes any bank connection first.

Questions about any of this can go to privacy@example.com. [Placeholder — replace with a real, monitored address before launch.]