Privacy Policy

• Your account: your name, email address, and password. Passwords are stored only as a salted hash by our authentication provider; we never see them.
• Your budget: the accounts, categories, assignments, and transactions you create or import.
• Bank data, only if you connect a bank: through Plaid, the names, types, last four digits, and balances of your bank accounts, and their transactions (date, amount, merchant, and Plaid's category). We also store an access token that lets us fetch new transactions. We never receive or store your bank username or password; you enter those with Plaid, not with us.
• Feedback you send: ideas and bug reports, your votes, and, for a bug report, the part of Claros it was about and, if you leave it on, your browser and screen size. Your name is never shown with an idea; ideas we take on may be shown to other people using Claros.
• Technical data: a sign-in cookie that keeps you signed in, and the routine request logs (IP address, browser, time) that our hosting providers keep to operate and secure the service.

We don't use advertising or analytics trackers.

• To run your budget: show balances, import transactions, and suggest categories based on how you've categorized before.
• To sign you in, keep your account secure, and send account emails such as confirmations and password resets.
• To fix problems and prevent abuse.
• To decide what to build next, from the feedback you send, and to reply to it.

We don't sell your data, share it for advertising, or use it to make decisions about you outside the app.

We ask for your agreement to this policy and our Terms of Service when you create an account, and record when you gave it and to which version. Connecting a bank is a separate, optional choice, made each time you connect one. You can withdraw either at any time: disconnect a bank from Settings, or delete your account.

We use a small number of service providers, each only for what's needed to run Claros:

• Plaid connects your bank. Plaid's handling of your data is described in the Plaid End User Privacy Policy. By connecting a bank, you agree to it.
• Supabase hosts our database and handles sign-in.
• Vercel hosts the app.
• Resend sends our emails (confirming your address, resetting your password), so it receives your email address and the message.
• Cloudflare Turnstile checks that sign-ins and sign-ups come from a person rather than a bot, using signals from your browser.

We may also disclose data if the law requires it, or to a buyer if Claros is ever sold, in which case this policy would continue to apply to your data.

• Everything travels over encrypted connections (HTTPS), and our database is encrypted at rest.
• Database rules let each person read and change only their own budget. Bank access tokens are readable only by our servers, never by any browser, including yours.
• Access to production systems is limited to the people who run Claros.
• Our team looks at your budget only to help you (say, when you ask about a missing transaction) or to keep Claros secure. They can look but not change anything, and every look is recorded with who looked and why.

We keep your data while you have an account. You can delete your account at any time from Settings → Profile. That disconnects every bank at Plaid and permanently deletes your account and everything in it. Disconnecting a single bank revokes our access to it straight away. The details, including backups and logs, are in our Data Retention and Deletion Policy.

You can see and correct your data in the app, and delete it as described above. You can download a copy of it yourself from Settings → Profile, or ask any question about it at support@claros.money. We answer within 30 days. Depending on where you live (for example California, or the EU and UK), you may have further rights, and we honor them.

Claros is for adults. You must be 18 or older to use it, and we don't knowingly collect data from anyone younger.

If we change this policy in a way that matters, we'll update the date above and tell you in the app or by email before the change takes effect.

Questions or requests: support@claros.money. Shiny Labs LLC, Maryland.