Privacy policy

What we collect

• Account info — your name, email, and password (the password is hashed by Supabase Auth, not stored in plain text).
• Business data — everything you type in: businesses, clients, products, suppliers, invoices, quotes, expenses, and any logos or settings you upload.
• Email settings — if you configure SMTP to send invoices from your own address, we store the credentials so we can send the emails on your behalf.

We don't use Google Analytics, advertising trackers, or third-party analytics tools. We don't track you across other sites.

Where it's stored

Data is stored in a Supabase Postgres database. Uploaded files (like business logos) are stored in Supabase Storage. Hosting is on Vercel. Both are reputable providers used by thousands of production apps.

Who can see it

Only you can see the businesses you create and their data. Row-level security in the database enforces this — even other signed-in users can't read your business's rows. Bruce, as the operator, can technically access the database for support and maintenance, but won't look at your data unless you ask for help with it.

Emails we send

Account emails (sign-up confirmation, password reset) are sent from our own SMTP. Invoice and quote emails to your clients are sent using yourSMTP credentials, so the email comes from your address and we don't see the contents in any third-party inbox.

Your data is yours

You can export everything at any time as CSV or a full ZIP backup (Settings → Backup). To delete your account and all its data, email bruce@atmyinfo.com. We'll confirm and remove it within a few days.

Cookies

We only set cookies needed to keep you signed in (Supabase Auth session cookies). No tracking or advertising cookies.

Changes

If we change anything material, we'll update the date at the top of this page and let signed-in users know.