Privacy Policy

Financial Records exists to hold information you would not hand to anyone else. This policy says exactly what we collect, what we do with it, and what we do not do with it.

1. What we collect

About you

• Account: your name and email address. There is no password -- you sign in with a one-time link, so we have no password to store or lose
• Preferences: account settings, theme choice
• Correspondence: support requests, feedback and suggestions

Your financial records

• Accounts: the names you give your cards and accounts (not card numbers), balances, limits, APRs and amounts due
• Transactions: expenses, income, payments and transfers
• Subscriptions: recurring payment schedules and amounts
• Analytics: totals and trends computed from the above, for your eyes only

Technical

• Usage: pages visited, features used, session length
• Device: browser, operating system, IP address
• Cookies: the session cookie, and your theme choice (kept in your browser, never sent to us)

2. What we use it for

• Running the tracking and reporting features you signed up for
• Processing subscription payments
• Sending bill reminders and account notices you asked for
• Answering your support requests
• Finding and fixing faults, and keeping the platform secure

3. How it is protected

• In transit: all traffic is encrypted with TLS
• Separation: every account's financial records live in their own database, not pooled in a shared table with a user column
• Sign-in: one-time links that expire in 15 minutes, work once, and only in the browser that asked for them
• Sessions: the session cookie cannot be read by page scripts, and sessions expire on their own
• Access: role-based database accounts, firewalled servers, and administrative access that is logged

4. Who we share it with

Not with

• Advertisers or marketing companies
• Data brokers or analytics companies
• Social media platforms
• Anyone buying it -- your financial data is not a product we sell

Only with

• PayPal, to take subscription payments -- the minimum they need, and no financial records
• Our own staff, where it is needed to fix a fault you have reported
• Authorities, where the law requires it or to protect our rights
• A successor, if the business is sold -- and we will tell you first

5. Your rights

• See it: everything held against your account is visible in the app
• Export it: download your records in a standard format
• Correct it: edit your account details and records at any time
• Delete it: close your account and have the data removed
• Be left alone: opt out of any email that is not about your account's security

6. Cookies

• Session cookie: required -- it is what keeps you signed in
• Theme: stored in your browser, never sent to the server
• No third-party tracking: no advertising or analytics cookies, from anyone

7. How long we keep it

• Active accounts: for as long as the account is open
• Closed accounts: permanently deleted after 90 days
• Backups: retained for disaster recovery and rotated out
• Legal hold: longer only where the law requires it

8. Children

• Financial Records is not intended for children under 13
• We do not knowingly collect information from them
• Anyone 13 to 17 needs a parent's consent
• A parent may ask us to delete their child's data

9. Where your data lives

• Data is processed and stored in secure data centres
• We comply with the privacy law that applies to you
• Users in the EU and UK have additional rights under the GDPR

10. Changes to this policy

• We will email you about any material change
• The current version is always on this page
• Continued use after a change means you accept it
• If you disagree, you may close your account

11. Contact

For anything privacy-related, including a request to export or delete your data:

• Email: info@financialrecords.net
• Or: use the contact form and pick "Security concern" or "General inquiry"