Operator and contact
Casharchy operates Casharchy. Each Casharchy account belongs to a single sign-in (Google, or an email address and password) and is one private personal or household workspace. For privacy questions or requests, contact privacy@casharchy.com.
Data Casharchy collects and where it comes from
Sign-in: Casharchy uses Supabase Auth. With Google sign-in, Casharchy receives your Google account email address and an authentication user ID. With email sign-in, Casharchy receives your email address; your password is stored by Supabase Auth only as a one-way hash, and Casharchy never sees it.
Manual entries: Casharchy stores the household figures and settings you enter across Cash, Spending, Debt, Brokerage, Net Worth, Federal Tax, and Projections, including transactions, beginning balances, checking accounts, custom categories and rules, monthly budgets, manual spending accounts, brokerage accounts, account types, positions, allocation targets, debt accounts, payment history, W-2 income sources and paychecks, Schedule C business income and deductions, tax filing settings, manual assets, historical snapshots, projection plans, undo history, and display preferences.
Plaid institution connections (paid accounts): When a paid account connects an institution through Plaid, Casharchy receives and stores institution names and IDs, account names, masks (last digits), types, subtypes, and balances; bank and card transactions (dates, amounts, merchant descriptions, categories, pending status, and Plaid’s transaction record); investment holdings (tickers, security names, share quantities, prices, cost basis, and values); and credit card, mortgage, and loan liabilities (statement balances, minimum payments, next due dates, and interest rates).
Billing (paid accounts): Payments are processed by Stripe. Casharchy never receives or stores your card number. Casharchy keeps a copy of your Stripe customer and subscription IDs, plan, price, subscription status, billing period dates and the billing events Stripe sends, so it knows whether your account is paid.
CSV imports: When you import a CSV file in Spending, your browser parses the file and saves the resulting transaction dates, descriptions, amounts, categories, and manual account assignments to your account.
AI imports: When you upload or paste a statement image, PDF, pay stub, or text instructions into an AI import tool, Casharchy sends the attachment and prompt to OpenAI to generate proposed transactions or paycheck entries, and saves only the records you confirm.
Demo requests: When you ask for a demo on the Request a demo page, Casharchy stores the name, email address and message you enter, and the time, so we can reply.
Plaid end-user notice
On paid accounts, Plaid reads data from the institutions and accounts you choose to connect. You enter your institution credentials directly in Plaid Link; Casharchy never receives or stores your institution username or password. Plaid access tokens stay on the server and are never exposed to the browser. Plaid’s handling of your information is governed by Plaid’s End User Privacy Policy.
Disabling an account’s visibility in Casharchy hides it from app views without revoking Plaid access. Disconnecting an institution in Settings revokes Casharchy’s Plaid access token (/item/remove) and stops future syncs while keeping your saved history.
AI tools
AI tools run only when you press an AI button. Casharchy does not send your data to OpenAI in the background or at any other time. Depending on which tool you run, Casharchy sends OpenAI:
- Cash AI import: the statement image or PDF and text instructions you submit, along with your saved Cash ledger rows (row ID, date, description, amount, category, and editability) and saved paycheck count. (Cash AI Optimize, which plans transfers above your floor, replaces paychecks and card payments, runs on Casharchy’s server without calling OpenAI.)
- Spending AI statement import: the statement image or PDF and prompt instructions you submit.
- Spending duplicate review: the selected month’s Spending transactions (date, description, amount, account identifier, source, and status).
- Income AI W-2 paycheck import: the pay stub image or PDF, prompt instructions, employer name, and up to 300 existing logged paychecks for that income source.
Requests are sent with store: false. Every AI tool displays its proposed output for your review before anything is saved. Casharchy does not give investment, tax or credit advice, and no AI tool suggests what to buy or sell.
Personal MCP keys
In Settings you can create a personal MCP key so an AI assistant you choose (such as Claude or ChatGPT) can read your Casharchy figures: Cash, Spending, Debt, Brokerage holdings and values, Net Worth, Federal Tax and Projections, including data that came from your connected institutions. The key can only read, never change anything. Anyone who has the key can read this data, so keep it private; Casharchy stores only a hash of it. What the assistant does with the data is governed by that assistant’s own terms. You can revoke a key at any time in Settings, and deleting your account revokes all of them. Market prices are not included in what a key returns.
Error reports, session replay and analytics
Error reports (Sentry): When the app hits an error, it sends Sentry a report of the error with technical details. Amounts, email addresses, query strings and request bodies are removed before it is sent.
Session replay on errors: The app keeps a short recording of the last moments of your session in your browser’s memory. It is sent to Sentry only when an error happens, to show what led to it. All text and form inputs are masked, images and media are blocked, and network contents are not recorded, so the recording shows the page layout and clicks, not your figures. No recording is sent when there is no error.
Performance traces: For about one in ten page loads the app sends Sentry timing data about how long pages and requests took, and the server sends similar timing data to Vercel. Query strings, amounts and email addresses are removed.
Analytics: Vercel Web Analytics and Speed Insights count page views (with the page address), performance and a few fixed events (such as which section of the home page was reached, or that a sign-up was submitted). They use no cookies and never include what you type, amounts or account details.
Do Not Track: Casharchy does not track you across other sites, so it treats every visitor as if Do Not Track were on; there is no separate response to the browser signal.
Service providers and subprocessors
Casharchy uses the following service providers to run the application:
- Supabase: database hosting, authentication, and private account-scoped Storage (stores your account identity, email address, password hash for email sign-in, household financial records, billing status, demo requests, server-side Plaid access tokens, and any screenshots attached to in-app issue reports).
- Vercel: application hosting, scheduled jobs, server performance traces, Vercel Web Analytics, and Vercel Speed Insights (receives standard web request metadata, page URLs, web vitals performance metrics, and the fixed events described above).
- Stripe: payment processing for paid plans (receives your email address, payment details you enter in Stripe Checkout, and your Casharchy account ID).
- Plaid: financial institution connectivity on paid accounts (receives your Casharchy user ID and the credentials and account selections you enter in Plaid Link).
- OpenAI: AI extraction and analysis when you run an AI tool (receives only the attachment, prompt, and account context described in the AI tools section above, with
store: false). - Google: Google sign-in (authenticates your Google account and provides your email address); Google Fonts on the public pages (your browser loads the fonts from Google, which receives your IP address); and Google Cloud Storage for encrypted off-site database backups.
- Yahoo Finance: market quotes and ticker lookup (receives only ticker symbols and symbol search queries from Casharchy’s server, without your identity, share counts, or balances).
- GitHub: in-app issue reports (receives the issue title, details, current page path, screen dimensions, browser user agent, your Casharchy account ID, and 7-day expiring signed links to any screenshots stored in private Supabase Storage) and notices of demo requests (everything entered in the form: name, email address, how you track money today, who it is for, your message and good times, so we can reply).
- Sentry: error reports, masked session replay on errors and performance traces, as described above.
No sale of data or advertising
Casharchy does not sell or rent your personal or financial data, does not use your data for advertising, and does not load advertising trackers.
Children
Casharchy is for adults managing their own household finances. It is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact privacy@casharchy.com and we will delete it.
Retention, disconnection, and deletion
Casharchy retains your household records until you delete individual records or delete your account. You can export an encrypted backup (JSON and CSV) from the Backup section in Settings at any time. Disconnecting an institution in Settings revokes Plaid access and keeps your previously saved financial history.
To permanently delete your account, go to Settings > Backup > Delete account and type DELETE to confirm, or follow the account deletion instructions. Casharchy first cancels any subscription at Stripe, removes every connected institution at Plaid (/item/remove), purges any issue-report screenshots stored under your user ID in private Supabase Storage (issue-screenshots), and then deletes every Casharchy record for your account, including billing status and MCP keys, and your sign-in account in one transaction. Stripe keeps its own payment records as the law requires. Issue reports filed from 18 October 2026 carry only your account ID; earlier ones may include your email address. You may ask for one to be erased by emailing privacy@casharchy.com. Demo requests are kept until we have replied and no longer need them, and are deleted on request. Service providers may retain encrypted backups and operational logs for their normal retention windows before automatic expiration. Manage or remove Plaid’s own copy at my.plaid.com or through Plaid’s data protection request form.