Privacy
How Findash handles your data
This is a plain-language description, not a lawyer-drafted legal document — it should be reviewed before Findash is used beyond early access.
What is collected
Your account email and name, and whatever you choose to enter about your finances — holdings, account/policy references, documents you upload, notes, goals, and emergency-contact details. Nothing is pulled from anywhere else on your behalf.
How it is protected
Sensitive fields — account numbers, policy numbers — are encrypted (AES-256-GCM) before they are written to the database, not stored as plain text. Every table is governed by row-level security, so a request can only ever read rows it is actually entitled to see; this is enforced by the database itself, not just application code. Signing in requires two-factor authentication before you can add anything.
Sharing with trusted contacts
Nothing is shared by default. You choose, entry by entry, whether it is visible to your trusted contacts, and up to four people can hold that access at a time. Anyone with it gets a strictly read-only view — nothing they open can be edited or deleted — and every time a shared entry is viewed, that view is logged and visible to you.
What is not done
Your data is not sold, and is not used to train anything. It is not shared with anyone beyond the trusted contacts you personally named, for the specific entries you personally marked as shared.
Questions
Reach out any time — see the Contact link in the footer.