Privacy Policy

Overview

OssFin LLC ("OssFin," "we," "our," or "us") is a personal finance application that helps you understand and manage your financial life. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights regarding your information.

By creating an account and using OssFin, you agree to the collection and use of information as described in this policy.

The short version: We collect only what's necessary to run the app. We do not sell your data. Your bank credentials are never stored — we use Plaid's bank-level API to securely access your accounts. Documents you upload for AI analysis, and messages you type to the assistant, are transmitted to Anthropic's API only to produce your result; Anthropic does not use this API content to train its models unless we expressly permit it; under its standard commercial API policy, inputs and outputs are deleted within 30 days, subject to exceptions such as safety investigations and legal requirements. You can delete all your data at any time.

1. Information We Collect

Account information. When you sign in with Google, we receive your name, email address, and profile picture from Google's OAuth service. We use this to create and identify your account.

Financial data via Plaid. When you connect a bank account or brokerage, we use Plaid Technologies, Inc. to retrieve:

Account balances and metadata (account name, type, institution)
Transaction history (merchant name, amount, date, category)

Your bank login credentials are entered directly into Plaid's secure interface — they are never transmitted to or stored by OssFin.

Uploaded documents. When you upload a financial statement (bank statement, investment statement, credit card statement), it is transmitted to Anthropic's Claude AI to extract the balances and transactions it contains. That extracted data is stored in your OssFin account. The document file itself is kept only if you choose "Keep a copy of the original file" when you upload it: then the file is stored encrypted so that you can reopen it from your Document Vault, can be retrieved only by you, and is deleted when you delete the document or your account, or when you remove the original. If you don't choose it, OssFin keeps only the details it reads out and discards the file after reading it.

Billing information. If you subscribe to a paid plan, your payment is processed by Stripe. OssFin receives only a billing confirmation and your subscription status — your card number and full payment details are never transmitted to or stored by OssFin.

Usage data. We may collect standard server logs including IP address, browser type, and pages visited for security monitoring and debugging purposes.

2. How We Use Your Information

To display your financial data within the OssFin dashboard
To calculate budgets, net worth, tax estimates, and financial projections
To authenticate your session and maintain account security
To process subscription payments and manage your plan
To send transactional emails (account confirmation, billing receipts) via our email service provider
To monitor application errors and performance
To respond to support requests
To improve the application based on aggregate, anonymized usage patterns

We do not use your financial data for advertising, credit scoring, or any purpose beyond operating OssFin for your benefit.

Any aggregate or anonymized usage data we generate is used solely to operate and improve OssFin. We do not sell, license, or otherwise disclose anonymized or aggregated data to third parties.

3. How We Store and Protect Your Data

OssFin applies the following security controls to your data:

Encryption at rest: Plaid access tokens (which allow us to retrieve your account data) are encrypted using AES-256-GCM before being written to our database. The plaintext token is never stored.
Encryption in transit: All data is transmitted over HTTPS/TLS.
Authentication: Your session is protected by a signed JSON Web Token (JWT) with expiry and inactivity timeout controls.
Access control: Only you — and anyone you explicitly invite as a partner or advisor, limited to the sections you choose and revocable at any time — can access your data. User IDs are derived from verified session tokens — never from user-supplied input.
Database: Your financial data is stored in a PostgreSQL database hosted by Railway on infrastructure with their own security certifications.
Field-level encryption of sensitive content: Data extracted from uploaded statements, imported CSV transactions, manually entered accounts, and your edits are encrypted at the field level (AES-256-GCM) before being stored.
Internal access: Access to the production systems and databases that hold user data is restricted to authorized personnel on a need-to-know basis.
Breach notification: If a data breach affects your personal information, we will notify affected users and applicable regulators without undue delay, in accordance with applicable law.

4. AI Features

OssFin uses AI for document analysis and for the assistant. Our AI transparency statement at ossfin.com/ai summarizes both.

Document analysis. OssFin's Document Analysis feature is powered by Anthropic, PBC (Claude AI). When you upload a financial document for analysis:

The document is transmitted to Anthropic's API over an encrypted connection.
Anthropic processes the document to extract financial data and returns the result. Anthropic does not use this API content to train its models unless we expressly permit it. Under its standard commercial API policy, inputs and outputs are deleted within 30 days, subject to exceptions such as safety investigations and legal requirements. See Anthropic's Privacy Policy.
The extracted data (account balances, transactions) is stored in your OssFin account database. Before it is stored, account, card and routing numbers in it are cut to the last 4 digits, and Social Security numbers, employer identification numbers, email addresses, phone numbers, and any account-holder name, address or date of birth are removed. This applies to the extracted data, not to the original file: if you choose to keep the original, it is kept as you uploaded it.
The document file is kept only if you choose "Keep a copy of the original file" when uploading. If you do, the file is stored encrypted at rest (AES-256-GCM) so that you can reopen it from your Document Vault; it can be retrieved only by you, and is deleted when you delete the document or your account, or when you remove the original from the document's page.

You are responsible for ensuring that any documents you upload contain only your own financial information or information you have permission to share.

Assistant. Where the assistant is available on your account, it answers general questions about how financial rules and concepts work. When you use it:

The messages you type in the conversation are transmitted to Anthropic's API over an encrypted connection. Your linked accounts, balances and transactions are not sent unless you turn on Personal mode.
Personal mode is off unless you turn it on in Settings, and you can turn it off at any time. When it is on and you ask about your own finances, the assistant also receives your net worth, asset totals, each debt's balance and interest rate, the tax estimate calculated from your saved tax profile, your goals (the names you gave them, with identifiers removed, plus targets and progress), your subscription total and count, and the Budget tab's average monthly spending by category, monthly budget and income totals (category names, never merchant names or individual transactions), and, when you ask about investments, your holdings' allocation by security type (percentages and totals, never individual securities or tickers; holdings are read live from Plaid for that question and not stored). Balances and annual amounts are rounded to the nearest $100 and monthly amounts to the nearest $10. If you ask about a particular merchant or category, the assistant can look up your total there; the lookup runs on OssFin's servers over your own transactions and returns only totals and a monthly breakdown, to the nearest dollar. It never receives account names, account numbers, institution names, other merchant names or individual transactions, and it never searches the web with your figures: when a current rule is needed, it is looked up first using only your question as you typed it (with identifiers removed), and then applied to your figures with search off.
Assistant memory is off unless you turn it on in Settings. When it is on, OssFin stores your assistant conversations so you can reopen them, and notes you choose to save. Both are encrypted. A conversation is deleted 24 months after its last message, and you can delete any conversation or note, or all conversations, at any time; deleting your account deletes them. Notes are written by you, never by the assistant, and are sent to Anthropic only together with Personal mode figures.
Before a message is sent, identifiers you type, such as account, card and Social Security numbers, email addresses and phone numbers, are removed from it.
To ground its answers, the assistant searches a fixed list of government and financial-institution websites. Anthropic handles these messages under the same terms described above for documents.
Each question and answer is stored encrypted in OssFin's database for 24 months for compliance review, then deleted automatically. Deleting your account deletes them right away.
The assistant provides general information, not personalized financial, investment, tax or legal advice. Answers are checked automatically for wording that recommends what you should do; a flagged answer is rewritten or withheld. The check is automated and works on wording, so it may not catch every recommendation.

5. Third-Party Services

Plaid. We use Plaid to connect to financial institutions. When you connect an account, you also agree to Plaid's End User Privacy Policy. Plaid maintains a SOC 2 Type II report and is subject to its own security and privacy obligations.

Stripe. Payment processing for OssFin subscriptions is handled by Stripe, Inc. Your payment information is transmitted directly to Stripe and governed by Stripe's Privacy Policy. OssFin does not store your card details.

Anthropic. AI document analysis and the assistant are powered by Anthropic's Claude API. Documents and assistant messages are transmitted to Anthropic only to produce your result. Anthropic does not use this API content to train its models unless we expressly permit it. Under its standard commercial API policy, inputs and outputs are deleted within 30 days, subject to exceptions such as safety investigations and legal requirements.

Google OAuth. Sign-in is handled by Google. We receive only your profile information (name, email, picture) — we do not receive your Google password or access to other Google services.

Resend. Transactional emails (such as billing receipts or account notifications) may be delivered via Resend. We share only your email address with Resend for the purpose of delivering these messages.

Sentry. We use Sentry for application error monitoring. Sentry may capture error context including partial request data. We configure Sentry to minimize personally identifiable information in error reports.

Railway / Vercel. OssFin's backend API and database are hosted on Railway. The frontend is hosted on Vercel. These providers maintain their own security certifications and do not have access to your unencrypted financial data.

We do not sell, rent, or share your personal or financial data with any third party for marketing or advertising purposes. Our privacy notice under the Gramm-Leach-Bliley Act summarizes this sharing in the standard federal format.

6. Business Transfers

If OssFin is involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, your information may be transferred to a successor or affiliated entity as part of that transaction. If your personal information would, as a result, become subject to a materially different privacy policy, we will notify you (by email or in-app notice) before the transfer takes effect. Any successor entity will be required to honor the commitments in this Privacy Policy or to provide you notice and choice as required by law.

7. Data Retention

We retain your data for as long as your account is active. There are two ways to end that, and they are deliberately different:

Delete your account (Settings → Delete account). Immediate and irreversible. All stored data — including Plaid access tokens, linked account records, and uploaded document data — is erased from our live systems within 24 hours, in practice within seconds. Any active subscription is cancelled at the same time. This is the route to use if you want your data gone now.

Cancel your subscription and choose deletion. Your paid access runs to the end of the period you have already paid for. Your account is then read-only for 30 days so you can change your mind, and we email you before anything is removed. After that your financial data is permanently deleted. We keep a small shell: your email address (so we can honour a request not to be contacted), the subscription record as a business and tax record, the security log entry showing the deletion happened, and any feedback you sent us. If you would rather not wait out the 30 days, delete your account directly at any point and it happens immediately.

Residual copies of deleted data may persist in encrypted backups until they are overwritten by the normal backup rotation, which takes no more than 89 days.

Plaid may retain data per their own retention policies. You can revoke Plaid's access to your accounts at any time via the Plaid Portal or from within OssFin (Settings → Linked Accounts).

Stripe retains transaction records as required for financial and legal compliance. Contact Stripe directly for questions about their retention practices.

8. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

Access / Know — request a copy of the personal information we hold about you and how we use it
Correction — request correction of inaccurate personal information
Deletion — delete your account and all associated data from within the app (Settings → Delete account) or by emailing evan@ossfin.com
Portability — request an export of your data in a machine-readable format
Opt out of sale or sharing — we do not sell or share your personal information, so there is nothing to opt out of
Withdraw consent — disconnect any linked account at any time from within the app

How to exercise your rights. Submit a request from within the app or by emailing evan@ossfin.com. To protect your account, we will take reasonable steps to verify your identity before fulfilling a request — typically by confirming control of the email address associated with your account.

Authorized agents. You may designate an authorized agent (such as a family member or an attorney) to submit a request on your behalf. We may require the agent to provide proof of your written authorization to act for you, and we may still ask you to verify your own identity or confirm the agent's authority directly.

No discrimination. We will not deny you service, charge you a different price, or provide you a different level of service because you exercised any of your privacy rights.

Appeals. If we deny your request, you may appeal by emailing evan@ossfin.com with the subject line "Privacy Appeal." We will review and respond to your appeal within 45 days (or as otherwise required by your state's law). If your appeal is denied, applicable state law may allow you to submit a complaint to your state Attorney General.

State-specific rights. Residents of California (under the CCPA/CPRA) and residents of other U.S. states with comprehensive consumer-privacy laws — including Colorado, Connecticut, Delaware, Florida, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia — have the rights described above to the extent those laws apply to you, and may exercise them as set out in this section. We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under these laws.

9. Cookies and Local Storage

OssFin does not use tracking or advertising cookies, and it loads no analytics or advertising scripts. It sets at most two cookies. Both are strictly necessary and httpOnly (they cannot be read by JavaScript in your browser), and both are sent only to OssFin — never to a third party:

ws_token keeps you signed in.
cb_oauth_nonce is set only while you connect a Coinbase account, to match Coinbase's reply to your session. It expires after 10 minutes and is sent only to OssFin's Coinbase connection address.

Browser storage. So the app opens quickly between visits, your browser also keeps a copy of your account data in its local storage: account balances, transactions and holdings, your budgets, goals and bills, and your tax answers. It stays on that device and is sent only to OssFin. Signing out removes it, and so does the automatic sign-out after 10 minutes without activity; our server clears the session cookie at the same time. On a shared or public computer, sign out when you finish. Clearing your browser's local storage alone will sign you out of this device.

Do Not Track and Global Privacy Control. OssFin has no advertising or analytics trackers and does not sell or share personal information for cross-context behavioral advertising, so there is nothing for these signals to switch off. You are treated as opted out whether or not your browser sends them.

10. Children's Privacy

OssFin is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at evan@ossfin.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email or in-app notification at least 7 days before the changes take effect. Changes become binding when they take effect, and your continued use of OssFin after that date constitutes acceptance of the updated policy — whether or not you received or opened the email notification. It is your responsibility to keep the email address associated with your account current.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us:

Email: evan@ossfin.com
Company: OssFin LLC, Florida
Website: ossfin.com