GhostMoney AI is a personal finance tool developed by Keith Crisologo, Oregon. Questions about this policy can be directed to hello@ghostmoney.app.

When you use GhostMoney, we collect the following: • Full name, email address, phone number (optional), and IP address — collected when you sign the Beta Tester Agreement • Extracted transaction data from bank statements you upload — merchant names, amounts, dates, and spending categories • Sinking fund goals and contributions you create manually • Monthly spending snapshots (summaries derived from your transactions) • Feedback you submit through the in-app feedback form • Session identifiers stored in browser cookies • A unique access code generated at NDA signing and associated with your account record We do NOT collect account numbers, routing numbers, bank login credentials, Social Security numbers, or the contents of your original bank statement files. In the event of a breach, an attacker would only see transaction metadata — merchant names, amounts, and dates. No bank credentials, account numbers, routing numbers, or original statement files are ever stored.

When you upload a bank statement, its text content is transmitted to Anthropic PBC's API (Claude AI) for parsing and transaction extraction. GhostMoney does not store the original file — only the extracted transaction data is saved to your account. Anthropic's privacy policy governs how they handle data sent to their API. Anthropic does not use API data to train their models by default.

Your data is stored in an encrypted database hosted on AWS US-West-2 servers via Turso (a managed SQLite service). Each user's data is isolated by a unique account identifier derived from your email address. No user can access another user's data.

GhostMoney shares data with the following service providers only as necessary to operate the service: • Anthropic PBC — AI parsing of bank statement content • Vercel Inc. — application hosting and serverless functions • Turso — encrypted database storage (AWS infrastructure) • Resend — transactional email delivery (welcome emails, milestone notifications) • Cloudflare — bot protection via Turnstile (no financial data shared) We do not sell, rent, or share your data with advertisers, data brokers, or any other third parties.

Your data is retained for as long as your account is active. Your Beta Tester Agreement signature is retained permanently as a legal record. All other data (transactions, statements, funds, snapshots) is deleted when you use the "Delete All Data" feature or submit a deletion request.

You have the following rights regarding your personal data:

Right to Delete: You may delete all your data at any time directly from the dashboard using the "Delete All Data" button. This immediately and permanently removes all transactions, statements, funds, and snapshots. If you cannot access your account, email hello@ghostmoney.appwith the subject line "Data Deletion Request" and we will process it within 7 days. Note: your Beta Tester Agreement (NDA) signature is retained permanently as a legal record and cannot be deleted.

Right to Know: You may email hello@ghostmoney.app to ask what data we hold about you.

Right to Correct: You may email hello@ghostmoney.app to request corrections to your name or email address on file.

Because GhostMoney never stores bank credentials or raw statement files, a breach would expose only transaction metadata (merchant names, amounts, dates) — not anything that could be used to access your bank account. In the event of a data breach affecting your personal information, GhostMoney will notify affected users within 72 hours of discovery, or as soon as practicable. Notification will be sent to the email address associated with your Beta Tester Agreement. We will describe what data was affected, the nature of the breach, and the steps being taken to address it.

GhostMoney uses three httpOnly, secure session cookies: one to record your Beta Tester Agreement signature, one to store your unique account identifier, and one to maintain your login session (tied to your individual access code). Sessions expire after 30 days and require re-entry of your access code to renew. These cookies cannot be read by JavaScript and are only transmitted over HTTPS. No advertising or tracking cookies are used.

GhostMoney is currently in beta. Data handling practices described in this policy reflect the current beta stage. Upon public launch, this policy will be updated. You will be notified of material changes.

With your explicit consent (given during signup or via the opt-in prompt in the dashboard), GhostMoney may use anonymized, aggregate statistics derived from your spending data to improve the accuracy of the service for all users. What this means in practice: • Only category-level summaries are used (e.g., median grocery spend across users in a given month) — never individual transaction details, merchant names, or dollar amounts tied to you • A minimum cohort floor of 5 consenting users is required before any aggregate statistic is computed or surfaced — single-user statistics are never published • Your name, email, account identifier, or any other personal identifier is never included in or derivable from aggregate computations • This analysis is used solely to improve GhostMoney's coaching accuracy — it is never sold, shared with advertisers, or used for any other purpose • You can opt out at any time from the "Data & Privacy" section of your dashboard. Withdrawal applies to future aggregation only — previously computed aggregate rows (which contain no individual user data) are unaffected. This data use is disclosed in your Beta Tester Agreement (Section 9g).

This Privacy Policy is governed by the laws of the State of Oregon. Any disputes will be resolved in the courts of Washington County, Oregon.