Privacy Policy
Last updated: June 2026
1. Information We Collect
When you create an account, we collect your email address, a hashed version of your password, your display name, and your chosen colour and PIN (stored as a secure hash). When you use the Service, we collect the financial entries you log — descriptions, amounts, categories, dates, and payment modes. We also collect basic usage information such as session tokens stored in secure HTTP-only cookies.
2. How We Use Your Information
We use your information solely to provide and improve the Bilanceo Service. This includes authenticating your identity, delivering your workspace data to you and your partner, sending email notifications you have opted into (such as expense alerts and budget warnings), and providing monthly summary reports. We do not use your financial data for advertising, profiling, or any purpose other than operating the Service.
3. Data Storage and Security
Your data is stored in a secure PostgreSQL database, which maintains industry-standard security practices including encryption at rest and in transit. Passwords and PINs are never stored in plain text — they are hashed before being stored. Session tokens are stored in HTTP-only, Secure, SameSite cookies. We implement rate limiting on all authentication endpoints to protect against brute force attacks.
4. Workspace Isolation
Each workspace is strictly isolated. Your financial data is only accessible to users who are members of your specific workspace — the owner and their one invited partner. No other user, including Bilanceo staff, can browse or access your workspace data through the application interface. Database-level row security policies enforce this isolation.
5. Email Communications
We send transactional emails necessary for the Service to function, including account verification emails, password reset links, and PIN reset links. With your consent (configured in workspace settings), we also send expense notifications and budget alerts to your registered email address. You can disable optional email notifications at any time from your workspace notification settings. We never send marketing emails without explicit opt-in.
6. Data Sharing
We do not sell, rent, trade, or share your personal information with third parties for their marketing purposes. We use the following sub-processors to operate the Service: Supabase (database hosting and authentication infrastructure), Resend or similar transactional email service (email delivery), and Vercel (application hosting). Each sub-processor is bound by their own privacy commitments and processes only the minimum data necessary to provide their service.
7. Data Retention
We retain your account data and workspace entries for as long as your account is active. If you delete your account or workspace, your data is permanently deleted from our database within 30 days, except where we are required to retain certain records for legal or compliance reasons. Authentication tokens and session data are automatically expired and purged on a rolling basis.
8. Your Rights
You have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your account and associated data, and export your expense data at any time using the CSV export feature within the application. To exercise any of these rights, contact us at bilanceo.vercel.app@gmail.com and we will respond within 30 days.
9. Cookies
We use a single essential cookie — the session cookie — to maintain your logged-in state. This cookie is HTTP-only (not accessible to JavaScript), Secure (HTTPS only), and SameSite strict (not sent with cross-site requests). We do not use any tracking, advertising, or analytics cookies. No third-party cookies are set by Bilanceo.
10. Children's Privacy
Bilanceo is not intended for users under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided personal information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a notice in the application. The date at the top of this page indicates when the policy was last updated. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at bilanceo.vercel.app@gmail.com. We take privacy seriously and will respond to all enquiries promptly.
Questions about your privacy or data?
bilanceo.vercel.app@gmail.com