Privacy Policy

Our Commitment to Privacy

At Where Is My Money Going?, your privacy is our priority. Uploading a statement to run an analysis is processed in server memory and is not saved. If you create an account, your saved analyses and paid report records are stored so you can access them again — see How We Process Your Data below for the specifics of what's stored, and Your Rights for how to delete it.

Voluntary Upload

All uploads are entirely voluntary. You choose what data to submit for analysis. You may also use our “Try with sample data” feature without uploading any personal information.

How We Process Your Data

• Statement processing: Your bank statement file is parsed and analyzed in server memory during your upload. The uploaded file itself is not written to disk or cloud storage.
• If you're signed in: Analyses you choose to save, and the full result of any paid report, are stored in our database so you can return to them later. This includes category totals, detected subscriptions, and merchant names — not raw statement files or full transaction-by-transaction detail.
• If you're not signed in: Nothing from your analysis is persisted after your session ends — you'd need to re-upload to see it again.
• Account required only to save results: You can run an analysis without creating an account. An account is only needed if you want to save analyses or access a paid report later without re-uploading.
• Server logs: Server logs contain only request metadata (timestamps, status codes), never statement text or transaction content.

What We Analyze

We only process three fields from your transactions: date, description (merchant name), and amount. We do not read or process names, account numbers, BSB/IBAN numbers, addresses, or credentials.

PII Redaction Before AI Analysis

Before any data is sent to our AI provider for enhanced analysis, we apply automated redaction to strip likely personally identifiable information (PII) including: names, addresses, account numbers, BSB/IBAN numbers, reference IDs, email addresses, and phone numbers. Only anonymized, aggregated spending categories are shared with the AI — never raw merchant names or exact amounts.

What We Do Collect

We may collect minimal, non-financial analytics data to improve our service:

• Basic usage metrics (page views, feature usage counts)
• Error logs (without transaction data or statement text)
• Browser type and general location (country level)

Analytics event payloads contain only booleans and counts (e.g., number of transactions analyzed), never raw text from your statement. This data cannot be used to identify you or reconstruct your financial information.

Bank Connection via Plaid

If you choose to connect your bank account directly instead of uploading a statement, we use Plaid Inc. to establish a secure, read-only connection to your financial institution. When you use this feature:

• Your bank login credentials are entered directly into Plaid's interface and are never seen, transmitted to, or stored by us.
• We request only transaction data (date, merchant, amount) — never account numbers, balances beyond what Plaid requires to function, or credentials.
• We fetch your recent transactions once, run the same in-memory analysis used for uploaded statements, and then immediately revoke Plaid's access to your account (via Plaid's item/remove) — we do not retain a standing connection or access token.
• Plaid's handling of your data while connected is governed by its own End User Privacy Policy, which we encourage you to review before connecting.

Third-Party Services

We use the following third-party services:

• Vercel — Frontend hosting.
• Render — Backend hosting for statement parsing and analysis. Processing there is in-memory only; the analysis backend itself does not write your statement data to disk.
• Database provider — If you have an account, your saved analyses and paid report records are stored in our database, described above.
• Plaid — Optional bank account connection (see above). Only used if you choose “Connect Bank” instead of uploading a file.
• Anthropic (Claude API) — Optional AI-enhanced analysis. Only receives anonymized, redacted, aggregated category summaries. Per Anthropic's API terms, data sent through the API is not used for model training.
• Google Analytics — Privacy-safe usage analytics only. No financial data is sent.

Data Not Sold or Shared

We do not sell, rent, or share your data with any third party for marketing or commercial purposes.

Your Rights

If you created an account, you can delete it — along with your saved analyses — from your account settings at any time. Paid report records (kept against your email address to support delivery, receipts, and refunds) aren't removed automatically when you delete your account; email us to request deletion of those. For any privacy question or a data request, contact us at support@whereismymoneygo.com.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.