Privacy Policy — Kashfbank

This Privacy Policy explains how Kashfbank ("the Service", "we", "our", or "us") handles your information when you use kashfbank.com.

• Account information — email address used to create your account via Supabase Auth (email OTP or Google OAuth).
• Uploaded files — bank statement PDFs you upload for processing, stored securely in Supabase Storage and linked to your account.
• Usage data — number of pages processed per month to enforce subscription limits.
• Payment information — subscription and billing data processed by our payment provider. We do not store card details.

• To extract and convert transaction data from your uploaded PDFs.
• To manage your account, subscription, and usage limits.
• To authenticate you securely.
• To improve the AI extraction accuracy over time (aggregate, non-identifying patterns only).

All data is stored in Supabase (PostgreSQL + Storage), hosted on secure cloud infrastructure. Uploaded PDFs are associated only with your authenticated account and are not accessible to other users. We use industry-standard encryption in transit (HTTPS) and at rest.

Subscriptions are billed monthly. Payment processing is handled by our payment provider — we do not receive or store your card number or billing address. You can cancel your subscription at any time from your account settings.

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes. Data is shared only with infrastructure providers (Supabase, AI processing) strictly to operate the service.

Kashfbank is not intended for users under 18. We do not knowingly collect information from minors.

You may request access to, correction of, or deletion of your data at any time by contacting us. To delete your account and all associated data, email us at the address below.

Supabase — authentication, database, and file storage.
AI Processing — AI models used to extract transaction data from PDFs. Uploaded content may be sent to these providers for processing.
Vercel — hosting and edge runtime.

We may update this policy as the service evolves. We will update the effective date and, for significant changes, notify registered users by email.

For privacy questions or data deletion requests, email: aghyaddev@gmail.com