Privacy Policy

1. What we collect

To operate the service we store:

• Account data: username, password hash (bcrypt — we never store plaintext passwords), full name, email address (for password resets), and role.
• Financial data you enter: transactions, budgets, accounts, categories, goals, and exchange rates.
• Security logs: login attempts (username, IP address, timestamp) kept for 24 hours for brute-force protection.
• Audit trail: who changed what and when, for accountability. See §5.
• Session data: a server-side session cookie to keep you logged in; it expires after 30 minutes of inactivity.

2. What we don't collect

We load no third-party scripts, fonts, or trackers. All JavaScript and styles are served from our own servers — your financial data is never sent to advertising or analytics companies. We do not use your data for marketing.

3. How your data is protected

• Each customer's data lives in its own isolated database; users cannot see other customers' data.
• Passwords are hashed with bcrypt and never logged.
• All state-changing requests require CSRF tokens; login is rate-limited.
• Authenticated pages are served with Cache-Control: no-store so browsers and proxies don't retain your financial pages.
• Database credentials are held as server environment variables, never in source code.

4. Who sees your data

No one but you (and users you explicitly share an account with) can see your financial data in normal operation. Our administrators can access the underlying databases for maintenance, backups, and support — and will only do so when necessary. We do not sell, rent, or share your data with third parties. We will disclose data only if required by law, and will notify you unless legally prohibited.

5. Retention

• Financial records and audit trail: kept for 7 years, consistent with financial record-keeping norms. The audit trail is append-only by design.
• Login-attempt logs: 24 hours.
• Password-reset tokens: single-use, expire after 1 hour; only hashes are stored.
• Sessions: destroyed after 30 minutes of inactivity.

If you close your account, your financial data is deleted after a 30-day grace period (to allow export), except for audit records we are legally obliged to retain.

6. Your rights

You may request a copy of your data, correction of inaccuracies, or deletion of your account (subject to the retention obligations above) by contacting your service administrator. Because the audit trail exists to prove what happened, individual audit entries cannot be edited or deleted on request.

7. Breach notification

If we discover a security incident affecting your data, we will notify affected users promptly with what happened, what data was involved, and what we're doing about it.

8. Changes

We may update this policy; material changes will be announced in the application. The "last updated" date above reflects the current version.

9. Contact

Privacy questions: contact your service administrator or Ensis Technologies directly.