Welcome to Expense Pro! Your privacy is critically important to us. This Privacy Policy document outlines the types of personal information that is received and collected by Expense Pro and how it is used.
1. Information We Collect
a. Account Information: When you register for an account, we collect information such as your name, email address, and password (stored securely hashed). You may optionally provide a profile picture.
b. Financial Data: You provide financial data including account names, balances, transaction details (description, amount, category, date), budget information, savings goals, investment details, and debt information. This data is essential for the functionality of the application.
c. AI Provider Information: If you choose to use the AI Assistant feature, you provide your own API key and select your preferred AI provider and model. We store your API key securely encrypted using AES-GCM encryption.
d. Usage Data: We may collect information on how the Service is accessed and used ("Usage Data"). This UsageData may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
2. How We Use Your Information
We use the collected data for various purposes:
- To provide and maintain our Service
- To notify you about changes to our Service
- To allow you to participate in interactive features of our Service when you choose to do so
- To provide customer support
- To gather analysis or valuable information so that we can improve our Service
- To monitor the usage of our Service
- To detect, prevent and address technical issues
- To process your financial data as per the application's functionality (e.g., calculating balances, generating reports).
3. AI Assistant and Third-Party Providers
Our AI Assistant operates on a "Bring Your Own Key" (BYOK) model. This means:
- You provide your own API key from a third-party AI provider (e.g., Google, OpenAI).
- When you use the AI Assistant, your prompts and relevant financial context from your account are sent to the AI provider you selected, using your API key.
- Expense Pro acts as a conduit. The processing of your data by the third-party AI provider is governed by their respective privacy policies. We are not responsible for the data handling practices of these external services.
- We strongly recommend you review the privacy policy of your chosen AI provider.
4. Data Security
The security of your data is important to us. We use industry-standard practices to protect your information, including password hashing (bcrypt) for authentication credentials and AES-GCM encryption for sensitive data like your AI API key. JWTs are used for session management. However, remember that no method of transmission over the Internet or method of electronic storage is 100% secure.
5. Data Sharing and Disclosure
Expense Pro will not rent or sell potentially personally-identifying and personally-identifying information to anyone. We may disclose your Personal Information only in the following circumstances:
- With Your Consent: For example, when you share an account with another user.
- Service Providers: We may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, or perform Service-related services. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. (e.g., email provider for notifications).
- For Legal Requirements: If required to do so by law or in response to valid requests by public authorities.
6. User Rights
You have the right to access, update, or delete your personal information. You can manage your account information through your profile settings. For deletion of your entire account and associated data, please contact us.
7. Cookies
We use cookies for session management and to ensure the proper functioning of our application. Our primary use of cookies is for authentication (e.g., storing your JWT in an HttpOnly cookie).
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us through our Contact Support page.