Privacy Policy

Last updated: October 7, 2026

Aurisar Ledger is a single-owner personal finance application. This policy explains what information we handle, how it is protected, and the rights you have over it.

What we collect

• Account credentials: a bcrypt-hashed password and, optionally, a TOTP secret and registered passkeys (WebAuthn public keys).
• Financial data: account balances, transactions, holdings, and institution metadata pulled from Plaid with read-only scopes you authorize.
• Session metadata: IP address, user-agent, and timestamps for sign-in events, refresh tokens, and security events.
• Manual entries: categories, budgets, goals, recurring rules, notes, and private documents (receipts and company records) you upload. Files are served only through the signed-in app — never a public storage link.

We do not collect analytics, tracking pixels, advertising identifiers, or device fingerprints.

How it's protected

• All traffic is encrypted in transit with TLS and HSTS (1-year, with subdomains).
• Plaid access tokens are encrypted at rest with AES-256-GCM.
• Passwords are hashed with bcrypt at cost factor 12.
• Sessions use 15-minute access tokens with rotating 7-day refresh tokens.
• The account locks after 5 failed sign-in attempts within 15 minutes for 30 minutes.
• You can review every sign-in and security event in Settings → Security.

How we use Plaid

Plaid is used to link your bank, brokerage, and credit accounts. Plaid receives credentials only at the moment you connect; we never see them. We request read-only scopes — Aurisar Ledger cannot move money or initiate transactions on your behalf.

Who we share with

No one. We do not sell, rent, or trade your data, and we do not share it with advertisers or analytics vendors. The only third parties that touch your data are infrastructure providers strictly required to operate the service:

• Supabase — encrypted PostgreSQL hosting.
• Render — server hosting.
• Netlify — static frontend hosting and DNS.
• Plaid — bank account aggregation, when you link an account.
• Resend — security alert emails (only if email alerts are enabled).

Data retention

Your data persists until you delete it. You can wipe everything from Settings → Data → Wipe Database. Audit logs and security events older than 90 days are pruned automatically.

Your rights

Because this is a single-owner application that you operate, you have full control over your data. You can export, modify, or delete it at any time from the Settings panel. If you would like a complete export or have a privacy concern, contact security@aurisar-ledger.com.

Changes to this policy

If this policy changes materially, the "last updated" date at the top will reflect that, and a notice will be posted in the application on your next sign-in.

← BACK TO APP