Privacy Policy

Anatroc Financial Intelligence ("Anatroc", "we", "us", or "our") is a personal finance platform that helps users understand and manage their financial lives. We are committed to protecting your personal information.

For questions about this policy, contact us at privacy@anatrocfinancial.com.

We collect the following categories of information:

Financial Data (via Plaid)

When you connect a bank account, Plaid (our banking data partner) retrieves on your behalf: transaction history, account balances, account names and types, and institution information. We store this data to power your dashboard. We never see or store your bank login credentials — those are handled exclusively by Plaid.

Data You Provide

Manual accounts and assets you add, savings goals, budget amounts, transaction notes, category overrides, and spending splits.

Usage & Derived Data

Spending patterns, category breakdowns, net worth history, savings rates, and your Financial DNA persona — all derived from your financial data to power features.

Account Data

Your email address, display name, and account preferences.

Social Data

Friend connections you make within the app and any reactions or interactions on Financial DNA personas (percentage-based only — no dollar amounts are shared between users).

We use your data solely to provide and improve the Anatroc service:

• Display your financial data in your personal dashboard
• Compute analytics, trends, and insights on your spending and net worth
• Generate your Financial DNA persona (percentage-based, no raw amounts shared)
• Power features like goals, budgets, simulations, and bill calendars
• Send transactional emails (sync alerts, friend requests, summaries)
• Improve the platform through aggregated, anonymized usage patterns

We do not sell your data. We do not use your financial data for advertising. We do not share your individual financial data with any third party except as required to operate the service (see Section 4).

Plaid

We use Plaid Technologies, Inc. to connect to your financial institutions. By connecting an account, you also agree to Plaid's End User Privacy Policy. Plaid may retain certain data per their own policy.

Supabase

Your data is stored in Supabase (a managed PostgreSQL database), hosted on AWS infrastructure with encryption at rest and in transit.

Vercel

The Anatroc application is hosted on Vercel. Application logs may contain request metadata but not your financial data.

Resend

We use Resend to deliver transactional emails. Your email address is shared with Resend solely to deliver emails you have requested or consented to.

We retain your financial data for as long as your account is active. Transaction data synced from Plaid is retained to power historical analysis features. If you delete your account, all personal data including transactions, goals, personas, and friend connections is permanently deleted within 30 days.

You can request deletion at any time by contacting us at privacy@anatrocfinancial.com.

All Users

You have the right to: access your data, correct inaccuracies, delete your account and all associated data, disconnect bank connections at any time, and opt out of non-essential emails.

EU / EEA Users (GDPR)

You additionally have the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local data protection authority. Our legal basis for processing your financial data is the performance of the contract (providing you the service you signed up for).

California Users (CCPA)

California residents have the right to know what personal information is collected, the right to delete personal information, and the right to opt out of sale (we do not sell data). To exercise these rights, contact privacy@anatrocfinancial.com.

We take the security of financial data seriously. All data is encrypted in transit (TLS) and at rest. We use Plaid for bank authentication, which means your bank credentials are never exposed to us. Row-level security policies ensure users can only access their own data. Access to our database is restricted to application services with least-privilege credentials.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately.

Anatroc is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from children. If we learn we have collected data from a child, we will delete it promptly.

We may update this policy as the service evolves. We will notify active users by email of material changes at least 14 days before they take effect. Continued use after changes take effect constitutes acceptance.

For privacy questions, data requests, or to exercise your rights:

Email: privacy@anatrocfinancial.com