Your data, protected

• Encryption at Rest: All data is stored in a PostgreSQL database (powered by Neon) with encryption at rest provided by the database infrastructure.
• Encryption in Transit: All connections use HTTPS/TLS encryption provided by Replit's hosting infrastructure to protect data as it moves between your browser and our servers.
• Secure Sessions: Your login sessions use HttpOnly, Secure, and SameSite cookies configured in the application to prevent session hijacking and XSS attacks.

• User-Specific Access: Every financial record (income, expenses, receipts) is linked to your unique user ID.
• No Cross-User Access: Users cannot access, view, or modify other users' data through the application.
• Authenticated Access Only: All financial data requires authentication — unauthenticated users are redirected to login.

• CSRF Protection: Flask-WTF CSRF protection is enabled to prevent unauthorized form submissions from malicious websites.
• Rate Limiting: Flask-Limiter enforces rate limits (200 requests/day, 50 requests/hour default, stricter limits on sensitive endpoints) to protect against brute-force attacks.
• Input Validation: User inputs are validated (e.g., tax year ranges, date parsing) to prevent common issues.
• Secure File Uploads: Uploads are checked by both file extension and actual content type (MIME validation) — PNG/JPG/JPEG for receipts, with PDF additionally allowed for Smart Import — capped at 16MB and saved under sanitized, timestamped filenames to prevent path-traversal attacks.
• Private Receipt Storage: New receipt uploads are stored outside the public web directory; any older files are served only through authenticated endpoints. In both cases receipts can only be retrieved by you after signing in — never directly by URL.

We believe in complete transparency about data access:

• Database Access: System administrators have technical access to the database for maintenance, backups, and troubleshooting.
• Privacy Commitment: We do not access, view, or analyze individual user data unless required for technical support with your explicit permission.
• No Data Selling: We never sell, rent, or monetize your financial data. We rely on trusted infrastructure providers (such as our database and hosting) to run the service, and on our AI provider only when you choose to use Smart Import (see below) — none of them are permitted to use your data for their own purposes.
• Support Access: If you request technical support, we may ask permission to access your specific data to resolve issues.

Smart Import is optional. When you choose to upload a receipt, invoice, or statement to it, here is exactly what happens:

• AI Processing: The document you upload is sent to our AI provider (OpenAI) solely to read it and extract line items (dates, amounts, vendors, categories). Nothing is sent unless you upload it to Smart Import.
• No Training on Your Data: Documents are processed through OpenAI's API only to return results to you. Under OpenAI's API policy, this content is not used to train their models.
• Temporary Handling: The uploaded file is held only long enough to process it and is then deleted from our servers — only the line items you review and confirm are saved to your account.
• You Stay in Control: You review, edit, and approve every extracted item before anything is added to your records, and you can use the rest of the app without ever using Smart Import.

• OAuth Integration: Secure authentication through Replit OAuth supporting Google, GitHub, and email login.
• Session Management: Persistent sessions with secure cookie configuration; authentication is managed through Replit OAuth's token system.
• Password Security: We don't store passwords — authentication is delegated to trusted OAuth providers (Google, GitHub, Replit).

• Account Information: Email, name, and profile details from your OAuth provider.
• Financial Records: Income, expenses, mileage, quarterly tax payments, tax calculations, and uploaded receipts you provide.
• Smart Import Results: The line items you confirm from AI Smart Import (the original uploaded document is not retained after processing).
• User Preferences: State, filing status, tax reminder settings, and app preferences.
• Usage Data: Login times and session information for security purposes.

• Data Export: Download your financial data at any time in CSV, PDF, or JSON — including detailed expense reports, a Schedule C summary, and an IRS-ready mileage log.
• Data Deletion: You can delete individual records or request complete account deletion.
• Data Portability: Your data is yours — export it whenever needed for tax filing or personal records.
• Update Access: Modify or correct any of your financial information at any time.