Privacy Policy

We collect information in the following categories:

• Account information: your name, email address, email-verification status, profile image, authentication provider, and information needed to maintain a secure session, such as IP address and browser or device details.
• Finance information: accounts, balances, categories, transactions, merchants, budgets, loans, recurring rules, reconciliation records, and import history that you choose to enter or upload.
• Files and preferences: profile images, visual assets, settings, and preferences you add to personalize Cashava.
• Integration information: connected AI provider, selected model, encrypted provider API key, integration grants, and limited technical records about feature use.

We use information to:

• create, authenticate, protect, and support your account;
• provide the finance features and views you request;
• send account verification, security, recovery, and deletion emails;
• operate optional AI and integration features you choose to use;
• diagnose failures, prevent abuse, and improve reliability; and
• comply with applicable legal obligations.

If you sign in with Google, Cashava receives the basic profile information needed to authenticate you, including your name, email address, profile image, and Google account identifier. Cashava uses this information only to create, sign in to, or link your Cashava account. Google sign-in does not give Cashava access to your Gmail, Google Drive, contacts, or other Google services.

Cashava's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

AI features are optional and require you to connect a supported provider. When you request an AI draft or insight, Cashava sends the prompt and the context needed for that request to the provider you selected. Depending on the feature, this may include a receipt image, account or loan context, finance summaries, or relevant transaction evidence.

Provider API keys are encrypted before storage and are used only to make requests you initiate. The selected provider processes submitted data under its own terms and privacy policy. You can disconnect a provider from Cashava settings.

We do not sell your personal information. Information is shared only as needed to operate Cashava, respond to your request, protect the service, or comply with law. Service providers may process data for hosting, database storage, transactional email, authentication, and optional AI requests. These currently include Vercel, Neon, Resend, Google, and any AI provider you choose to connect.

Cashava uses reasonable technical and organizational measures to protect information, including encrypted network connections, access controls, owner-scoped finance records, and authenticated encryption for stored AI provider credentials. No online service can guarantee absolute security.

Service providers may process information in countries other than your own. Their handling of that information is governed by their contracts, privacy policies, and applicable law.

We keep information while your account is active and as needed to provide Cashava. You may request account deletion from Cashava settings and confirm it through the email sent to your account. Deletion removes your account and associated Cashava records from the active application database. Limited copies may remain temporarily in provider backups or security logs until their normal retention cycles complete or when retention is required by law.

You can review and update account information, export supported finance data, disconnect optional AI providers, or delete your account using Cashava's settings. You may also contact us to ask about your information or request help exercising applicable privacy rights.

We may update this policy when Cashava's features or data practices change. The effective date at the top of this page will be updated when material revisions are published.

Questions about privacy or data handling can be sent to mtharreq@gmail.com. You can also review the Terms of Service.