Budgeteer Pro’s Privacy Policy

Budgeteer Pro is operated by Budgeteer Pro LLC, a Florida limited liability company. This policy explains what information the service collects, who processes it on our behalf, how long it is kept, and how you can export or delete it. It applies to our website, web application, and iOS app.

We collect what you give us, what your bank sends us when you connect an account, and a small amount of technical data needed to run the service.

• Account details: your name, email address, and profile picture, handled by our authentication provider
• Financial records you enter: accounts, transactions, categories, budgets, tags, savings goals, and debts
• Financial data imported from a bank you connect: account names, account type, institution name, the last four digits of the account number, balances, credit limits, and transaction history including dates, amounts, descriptions, and merchant names. For credit cards and loans we may also import interest rate, minimum payment, and due date
• Support messages: anything you send through our contact form, including your name, email, and message
• Push notification device tokens, if you enable notifications in the iOS app
• Usage telemetry: which screens you open and how long they take to load, along with your browser user-agent string and a session identifier, used to find and fix performance problems

Some things are worth stating plainly because people reasonably assume otherwise.

• We never receive or store your bank username or password. When you connect an institution, those credentials go directly from your device to Plaid and are never seen by Budgeteer Pro
• We do not store full account numbers or routing numbers, only the last four digits your bank provides
• We do not collect your Social Security number, date of birth, or government identification
• We do not record your screen. Session replay is deliberately disabled in our error-monitoring tools because this app displays account balances and transaction history

Collected data is used to run Budgeteer Pro and for nothing else.

• Provide and maintain budgeting, categorization, and reporting features
• Import and display transactions from institutions you connect
• Send service-related notices, including notifications you have enabled
• Respond to support requests and troubleshoot issues
• Detect abuse, fraud, and technical failures

Budgeteer Pro uses Plaid Inc. to connect to your financial institutions. Connecting an account is entirely optional — the app works with manually entered data — and the connection is read-only. We cannot move money, make payments, or change anything at your bank.

• You enter your bank credentials directly with Plaid, never with us. Plaid returns a token that lets us retrieve your account and transaction data; that token is stored on our servers and is never exposed to any client application
• We request up to 24 months of transaction history when you first connect, so your budgets and trends have context
• Plaid’s handling of your information is governed by Plaid’s End User Privacy Policy, available at plaid.com/legal. You can also review and manage your Plaid connections at my.plaid.com
• You can disconnect an institution at any time from the Accounts screen. When you do, we instruct Plaid to revoke the connection
• If you delete your Budgeteer Pro account, we revoke every bank connection at Plaid before erasing your data, so the connection does not survive your account

We do not sell or rent personal information, and we do not share it with advertisers or data brokers. We do rely on a small number of service providers to operate the product. Each one receives only what it needs, and each is bound by its own agreement with us.

• Clerk — authentication. Holds your name, email address, password or social login, and profile picture, and sends account emails such as verification and password resets
• Convex — application database and backend. Stores the financial records and settings described above
• Plaid — bank connectivity, as described in the previous section
• Vercel — website and application hosting, plus privacy-friendly analytics and performance measurement. These analytics are cookieless and are not linked to your account
• Sentry — error monitoring. Receives technical error reports and internal record identifiers, configured to exclude request contents and user records
• Resend — delivers notification emails. Receives your email address. These emails deliberately contain no financial detail, only a prompt to open the app
• Apple — delivers push notifications to iOS devices. Notification payloads deliberately contain no financial detail

Budgeteer Pro supports shared household workspaces. If you invite someone into your household, they can see the accounts and transactions that are marked as shared. Accounts you mark as private remain visible only to you, and are excluded from other members’ views, exports, and reports. Anyone you invite is someone you have chosen to share financial information with, so invite deliberately.

Beyond the service providers above, we disclose information only in narrow circumstances.

• With your explicit direction or consent
• To comply with a legal obligation, subpoena, or lawful request
• To investigate fraud, protect our rights, or protect the safety of users
• To a successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy

Budgeteer Pro is built on managed infrastructure that encrypts data in transit and at rest at the platform level. On top of that, we apply our own controls.

• All traffic is served over TLS
• Every backend request is authorized against your identity, and access to household data is scoped per member so private accounts are unreachable by others
• Bank tokens are readable only by internal server functions and are never returned to any client
• Incoming webhooks from Plaid and our authentication provider are cryptographically verified before they are acted on
• No security program is perfect, and we cannot guarantee absolute security. If a breach affects your information, we will notify you as required by law

We keep information for as long as your account is active, and delete it on the schedule below.

• Account deletion: when you request deletion, your account is scheduled for permanent erasure 30 days later. You can cancel during that window by signing back in. After it passes, your financial records, bank connections, and profile are permanently deleted and cannot be recovered
• Notifications: deleted automatically after 90 days
• Usage telemetry: deleted automatically after 90 days
• Support messages: retained up to 24 months so we can maintain a support history, then deleted
• Information already transmitted to a service provider, such as an error report or an email delivery log, is subject to that provider’s own retention schedule

You can exercise these at any time from within the app, without contacting us.

• Access and export: download your data as a spreadsheet file from your profile settings
• Correct: edit or delete any record you have entered
• Disconnect: revoke a bank connection from the Accounts screen without deleting your account
• Delete: delete your account and all associated data from your profile settings, on both web and iOS
• Notifications: turn email and push notifications on or off in settings
• Depending on where you live, you may have additional statutory rights to access, correct, port, or delete your information. We honor these requests from all users regardless of location — write to us at the address below

We use a deliberately small set of browser storage, and we do not use advertising or cross-site tracking cookies.

• Session cookies set by our authentication provider, required to keep you signed in
• A cookie remembering whether your sidebar is expanded
• Local storage for interface preferences such as theme, selected month, and which notifications you have already seen
• Our analytics provider measures page performance without cookies and without identifying you

Budgeteer Pro is intended for adults. Our Terms of Service require you to be at least 18 years old, though we do not verify age. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

We may revise this policy periodically. Material changes will be reflected on this page with an updated date, and we will give notice in the app where the change is significant.

Budgeteer Pro LLC, a Florida limited liability company. For privacy questions or requests, contact:

• Privacy: privacy@budgeteerpro.io
• Support: hello@budgeteerpro.io