Privacy Policy

Piggey.ai ("we," "us," or "our") helps you understand your spending by importing transaction data you provide, categorizing it, and offering AI-assisted insights. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Piggey.ai does not connect to your bank. You import a CSV export yourself — we never ask for your bank password or use account-linking aggregators. Your CSV is parsed in your browser; we do not store the raw upload, only the transaction rows needed to run the service.

By creating an account or using the service, you agree to this policy. If you do not agree, please do not use Piggey.ai.

Account information. When you sign up, Clerk (our authentication provider) processes your email address and credentials. We receive a user identifier linked to your account. Multi-factor authentication is available through Clerk.

Financial data you provide. This includes bank or card transactions you import via CSV, account names, categories, classification rules, subscription patterns, reports, and preferences such as display currency and exchange rates. The original CSV file is not stored on our servers — only parsed transaction data is saved to your account.

AI interactions. When you use features such as Penny (our AI assistant) or AI-powered report building, we send relevant context — such as transaction summaries, category names, and your messages — to third-party AI providers (Anthropic or OpenAI, depending on configuration) to generate responses. We use providers with zero-data-retention (ZDR) agreements: they do not retain your data after processing or use it to train their models. AI features run only when you invoke them.

Technical and analytics data. Like most web applications, we may receive standard server logs (IP address, browser type, request timing) through our hosting infrastructure. We use product analytics (PostHog) to understand how the service is used.

• Provide, maintain, and improve the service
• Store and display your transactions, categories, and reports
• Run categorization, subscription detection, and trend analysis
• Power AI-assisted features you request
• Respond to support requests and protect against abuse

We will not sell, rent, or license your personal information or financial data. We do not use your transaction data for third-party advertising. We earn revenue when you choose a paid plan — not by monetizing your spending history.

Your account and financial data are stored in Cloudflare D1 (database hosting). Data is encrypted at rest on Cloudflare's infrastructure and associated with your user account only — it is not shared with other users. Access is enforced on every request.

All traffic between your browser and Piggey.ai is encrypted in transit (HTTPS).

We rely on trusted providers to run the product. We share only what each needs to perform their role:

• Clerk — authentication and account management
• Vercel — application hosting
• Cloudflare D1 — database (your transactions and settings)
• Stripe — subscription billing (Pro plan only)
• Anthropic / OpenAI — AI features you invoke, under zero-data-retention agreements
• PostHog — product analytics
• Resend — transactional and support email

These providers process data according to their own privacy policies and our agreements with them.

We retain your data while your account is active and as needed to provide the service. You may delete your financial data at any time using in-app controls ("Clear all data" in Settings). Deleting your Clerk account may not automatically delete all application data — contact us if you need full account erasure, including billing records.

We may retain limited information where required by law or for legitimate security and backup purposes.

We use industry-standard measures including encrypted connections (HTTPS), encrypted storage through our database provider, and access controls tied to authenticated accounts. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

To report a security vulnerability, email security@piggey.ai. We take responsible disclosure seriously.

Depending on where you live, you may have rights to access, correct, export, or delete personal information. To exercise these rights, email support@piggey.ai. We will respond within a reasonable time.

You can stop using AI features at any time by not invoking them; other features will continue to work without sending data to AI providers.

Piggey.ai is not intended for anyone under 18. We do not knowingly collect information from children.

If you access the service from outside Canada, your information may be processed in Canada or other countries where our providers operate. By using the service, you consent to that transfer.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated through the app or by email where appropriate.

For privacy questions or requests, contact support@piggey.ai. For security reports, contact security@piggey.ai.