Privacy Policy

1. Introduction

Welcome to FinanceDeck. Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application. By using FinanceDeck, you agree to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and a hashed version of your password. If you sign in with a third-party provider such as Google, we receive your name, email address, and profile picture from that provider.

Financial Data You Provide

You may manually enter information about your debts, including account names, balances, credit limits, interest rates, minimum payments, and due dates. We do not connect to your bank or financial institution. All financial data is entered by you.

Usage Data

We automatically collect certain information when you access our application, including your IP address, browser type, operating system, referring URLs, and pages visited. This data helps us improve the service.

Analytics Data

We use Google Analytics (GA4) to collect anonymized usage data, including pages visited, session duration, device type, browser type, and approximate geographic location. Google Analytics uses cookies (_ga and _ga_* identifiers) to distinguish unique users. This data is aggregated and anonymized — it does not include your name, email, financial data, or any information you enter into the application. You can opt out of Google Analytics by declining cookies when prompted or by installing the Google Analytics Opt-Out Browser Add-on.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the application
• Personalize your experience and deliver relevant content
• Calculate debt payoff strategies and generate alerts
• Send you important account notifications
• Improve our application and develop new features
• Detect and prevent fraud or abuse

4. Data Storage and Security

Your data is stored on secure servers with encryption at rest and in transit. Passwords are hashed using industry-standard algorithms and are never stored in plain text. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Sensitive fields such as bank names, account names, and notes are encrypted at the column level using AES-256-GCM before being stored in the database. No one — including our support, development, and operations teams — can access or view your financial data. Administrative tools do not expose user account details, balances, or debt information.

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We share data with trusted third-party services that help us operate the application. These include: Neon (database hosting — all data encrypted), Stripe (payment processing — email and name only), Google OAuth (authentication — email only), Google Analytics (anonymized usage data — no personal or financial information), and our email provider (alert delivery — email address and account names only, no balances). All service providers are subject to confidentiality agreements.
• Legal Requirements: We may disclose your information if required to do so by law or in response to a valid legal request.
• Business Transfers: If FinanceDeck is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication and session management. These cannot be disabled as they are necessary for the application to function.
• Analytics Cookies: We use Google Analytics (GA4) to understand how visitors interact with our application. GA4 sets cookies (_ga, _ga_*) to distinguish users and track page views. These cookies collect anonymized data only — no personal or financial information is included. You may decline analytics cookies at any time without affecting the functionality of the application.

We do not use advertising cookies, remarketing cookies, or any third-party tracking for marketing purposes.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the information below.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

9. Children's Privacy

FinanceDeck is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically for any changes.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at info@myfinancedeck.com.