Personal Information

• Name, email address, and phone number when you create an account
• Billing information for subscription payments
• Company details when you register for business accounts
• Communication preferences and support ticket information

Usage Data

We track how you interact with our platform to improve your experience. This includes which features you use most, where you encounter problems, and how long you spend on different sections. We also log your IP address and device information for security purposes.

Financial Data

Our analysis tools process financial information you upload or connect through integrations. We encrypt this data both in transit and at rest, and we never share your financial details with third parties without your explicit consent.

Data Storage

• Primary servers located in secure data centers in Vietnam and Singapore
• Encrypted backups stored in multiple geographic locations
• Data retention periods vary by type: account data for active accounts, usage logs for 2 years
• Financial analysis data is deleted 90 days after account closure unless legally required to retain longer

Security Measures

All data transmission uses TLS 1.3 encryption. We use AES-256 encryption for data at rest. Our systems undergo regular security audits, and we maintain SOC 2 Type II compliance. Access to your data is restricted to authorized personnel who need it for their job functions.

Access and Portability

You can request a copy of all personal data we have about you. This includes your account information, usage history, and any financial data you've uploaded. We'll provide this in a machine-readable format within 30 days of your request.

Correction and Deletion

You can update most of your personal information directly in your account settings. If you find incorrect information that you can't change yourself, contact us and we'll fix it. You can also request deletion of your account and associated data, though some information may need to be retained for legal or security reasons.

Marketing Communications

• Unsubscribe from marketing emails using the link in any email
• Adjust notification preferences in your account settings
• Request removal from all marketing communications by contacting support

Payment Processing

We use Stripe and PayPal for payment processing. These services have their own privacy policies and security measures. We don't store your credit card information on our servers - it's handled entirely by these payment processors.

Data Integrations

With your permission, we can connect to banking APIs and accounting software to import financial data for analysis. These connections use read-only access with bank-level encryption. You can revoke these permissions at any time from your account settings.

Analytics and Monitoring

We use Google Analytics to understand how our website is used and New Relic for performance monitoring. Both services are configured to anonymize personal identifiers. You can opt out of analytics tracking by enabling Do Not Track in your browser.

Data Transfer Safeguards

• Standard contractual clauses with all international service providers
• Encryption requirements for all data transfers
• Regular audits of international partners' security practices
• Right to know which countries your data may be processed in

How We Notify You

• Email notification for major changes that affect how we use your data
• In-app notification when you next log in
• Updated date at the top of this policy
• Summary of changes posted in our help center