Privacy Policy

Effective Date: December 2024

Last Updated: December 2024

1. Introduction

This Privacy Policy describes how Finvella ("we," "our," or "the Application") collects, uses, and protects your information when you use our service.

2. Information We Collect

2.1 Financial Data

When you use the Application, you may upload or connect financial transaction data including:

Bank transaction history (dates, descriptions, amounts)
Account identifiers
Transaction categories

2.2 Authentication Data

When you sign in via Google OAuth, we receive:

Email address
Name
Profile picture (optional)

2.3 Usage Data

We automatically collect:

Log data (timestamps, errors)
API request metadata

3. How We Use Your Information

Your information is used to:

Provide financial analysis and insights
Authenticate your access to the Application
Maintain and improve the service

4. Data Sharing

We share data with the following service providers:

Provider	Purpose	Data Shared
Google	Authentication	OAuth tokens
Anthropic	AI Analysis	Chat messages, transaction summaries
Vercel	Hosting	Application logs
Turso	Database	Transaction data (if persistence enabled)
Plaid	Financial Data Access	Bank credentials (via Plaid Link)

We do not sell your personal information.

5. Data Security

We protect your data through:

Encryption in transit (HTTPS/TLS)
Encryption at rest (database encryption)
Multi-factor authentication requirement
Access controls limiting data access to authorized users
Regular security updates and vulnerability scanning

6. Data Retention

Financial data is retained only as long as needed for analysis. You can delete all your data at any time through the application. See our Data Retention Policy for details.

7. Your Rights

You have the right to:

Access your data through the application
Delete your data at any time
Export your data (source CSV files remain yours)
Revoke third-party access (e.g., Plaid connections)

8. Third-Party Services

The Application integrates with third-party services. Please review their privacy policies:

9. Cookies

We use essential cookies for:

Authentication session management
Security (CSRF protection)

We do not use tracking or advertising cookies.

10. Children's Privacy

This Application is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date.

12. Contact

For privacy-related questions or to exercise your data rights, contact the application owner.

This privacy policy was last updated in December 2024.