Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Email address and encrypted password when you create an account.
• Financial Statements: Credit card statement PDFs you upload for analysis.
• Transaction Data: Extracted transaction details including dates, descriptions, amounts, and AI-assigned categories.
• Usage Data: How you interact with the service, including category customizations and work profile configurations.

2. How We Process Your Data

When you upload a credit card statement, our system processes it using AI to extract transaction data and categorize spending. This processing happens on secure backend servers. The AI categorization is automated and may not always be perfectly accurate — you can manually adjust categories at any time.

3. Data Storage & Security

Your data is protected through multiple layers of security:

• All data is encrypted in transit (TLS) and at rest.
• Row-Level Security (RLS) ensures you can only access your own data.
• Uploaded statements are stored in user-scoped, access-controlled storage.
• Authentication tokens are securely managed and expire automatically.

4. Data Retention & Deletion

Your data is retained as long as your account is active. You can export everything and delete your account yourself from Settings — deletion removes your uploaded files, all transactions and related records, and the account itself, permanently and without a recovery window. See the Security page for details.

5. Third-Party Services

We use the following third-party services to operate Bimuna:

• Cloud Infrastructure: For hosting, database, authentication, and file storage.
• AI Services: For transaction categorization and spending insights generation.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Cookies & Local Storage

Bimuna uses browser local storage to maintain your authentication session and user preferences (such as theme settings). We do not use third-party tracking cookies or advertising scripts.

7. Your Rights

You have the right to:

• Access and export your transaction data.
• Correct inaccurate categorizations or information.
• Request deletion of your account and data.
• Withdraw consent for data processing at any time.

8. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@bimuna.com.