Privacy policy

Last updated: June 2026

Praxelle processes your data to provide personal finance services. We do not sell data to third parties or use ad tracking based on your financial activity.

Controlled access to your data

Each workspace is isolated with Postgres Row Level Security. You and its authorized members can access its data. Administrative support access is restricted and audited. We do not sell or share your information with advertisers.

Encryption at rest

We encrypt transaction descriptions, notes, and payee names in the database with AES-256-GCM. Each workspace has its own key (DEK). Amounts, categories, and dates remain plaintext because the server must compute budgets, reports, and aggregates — no one outside your workspace can read them thanks to strict isolation.

Encrypted fields

Transaction descriptions
Transaction notes
Payee names

Processed on server (not encrypted)

Amounts and currencies
Categories and accounts
Dates and report metadata

Your rights

You can export all your data as a ZIP from Settings → Privacy and request account deletion with a 30-day grace period (GDPR). Contact: privacy@praxelle.com.

Sub-processors

We use the infrastructure and service providers listed below under contract, with their purpose and region. Anthropic only receives data if you enable AI in your workspace, and only with your consent.

Provider	Purpose	Location
Managed Postgres	Primary database	TODO: to be decided — Supabase (ca-central-1) or Fly Managed Postgres (yyz). Pending the founder's data-residency decision.
Fly.io	Backend API hosting	Canada (yyz) — TODO: confirm region after the data-residency decision
Vercel	Web frontend hosting (Next.js)	Global edge network
Cloudflare R2	Attachment and receipt-image storage	Global
Stripe	Payment and subscription processing; Praxelle is the seller	US / EU
Postmark	Transactional and inbound email	US
Anthropic	Receipt OCR and AI categorization — only if you enable AI in your workspace, with your consent	US
Sentry	Application error monitoring	US / EU — TODO: confirm project region

Artificial intelligence

AI is off by default. If you enable it, some data (description, amount, receipt image) is sent to Anthropic for OCR, categorization, or advisor features. We do not send your email or internal identifiers. You can disable it anytime from Settings → Privacy.

Cookies

Essential session and authentication cookies only. We do not use third-party advertising or analytics cookies.