Privacy Policy

Overview

Invisible Budget is a personal finance application. This policy explains what data we collect, why, and how we protect it. We believe in transparency — this policy is written in plain language, not legalese.

What we collect

When you join the waitlist

We collect your email address via Kit (formerly ConvertKit), our email service provider. We use this solely to notify you about Invisible Budget's availability. Kit's privacy policy applies to how they store and process this data.

When you use the app

• Account credentials: You connect bank accounts via Plaid. Your bank login credentials are handled entirely by Plaid — they never touch our servers. We receive a read-only access token from Plaid to retrieve your account and transaction data.
• Financial data: Account balances, transaction history, and account metadata (institution name, account type, last four digits). This data is stored in our database encrypted at rest.
• Categorization data: Categories you create, rules you define, and corrections you make to AI-suggested categories.
• Chat conversations: Questions you ask the AI assistant and the responses generated.
• Email address: Used for account login (via Google OAuth) and to send you financial reports and alerts based on your notification preferences.

What we do NOT collect

• Your bank login credentials (handled by Plaid)
• Your Social Security number
• Analytics or tracking data (no Google Analytics, no pixel tracking)
• Data from third parties about you

How we use your data

• Display your accounts, balances, and transactions
• Categorize transactions automatically using AI
• Generate financial insights, reports, and forecasts
• Answer your questions via the AI chat interface
• Send you waitlist and product update emails
• Send you financial reports and alerts to your registered email (based on your notification preferences in Settings)

That's it. We do not sell your data, use it for advertising, share it with third parties for their marketing purposes, or use it to train AI models.

Third-party services

We use the following services to operate Invisible Budget:

• Plaid — bank account connections (read-only). Plaid's privacy policy
• Anthropic (Claude) — AI-powered categorization, chat, and report generation. Your financial data is sent to Anthropic's API to generate responses. Anthropic does not use API inputs to train models. Anthropic's privacy policy
• Render — application hosting. Render's privacy policy
• Resend — transactional email delivery (financial reports, alerts, and notifications). Your email address is shared with Resend solely to deliver these messages. Resend's privacy policy
• Kit (ConvertKit) — waitlist email management. Kit's privacy policy

Data security

• All bank credentials (Plaid access tokens) are encrypted at rest using AES-256-GCM
• All connections to the app use HTTPS/TLS
• Your data is encrypted and isolated per-user — no other user can access your financial information
• All financial calculations use integer arithmetic (cents) to prevent rounding errors

Data retention and deletion

Your financial data is retained as long as you have an active account. You can export all your data at any time via the Settings page (full JSON backup). You can request complete deletion of your account and all associated data by emailing support@invisiblebudget.com.

Your rights

You have the right to:

• Access all data we hold about you (available via in-app export)
• Correct inaccurate data
• Delete your data entirely
• Unsubscribe from emails at any time

Changes to this policy

We'll update this page when the policy changes and note the date at the top. For significant changes, we'll notify you by email.

Contact

Questions about this policy? Email support@invisiblebudget.com.