Legal

Privacy Policy

Last updated: October 15, 2026

The short version

Zerofy stores the account details and bill-tracking data you enter so the app can work. We don't sell your data and we don't run ads. Bank discovery is optional and off unless you connect a bank yourself (section 9), and you can export or delete everything at any time.

1. What we collect

Account information. Your email address, your name, and a hashed password (we never see or store the password itself — authentication is handled by Supabase).

The data you enter to use the app. Property names and addresses, bill names and amounts, account balances, credit scores you log, payment records, notes, and similar tracking data. This can include financially sensitive information — that's the point of the app — and it is only ever used to show your own data back to you.

Feedback you send us. If you use Send feedback, we keep what you wrote, the category you picked, whether we may reply, the page you came from and the app version, so we can fix things during the beta. It is read by the operator only, is never shown back in the app, and is deleted with your account.

What we deliberately do not collect: bank passwords, full account or card numbers, or Social Security numbers. Optional bank discovery (section 9) is read-only through Plaid;Zerofy cannot move money.

2. How we use it

To provide the Service — storing and displaying your data.
To send transactional email (signup confirmation, password reset). We don't send marketing email without your consent.
To respond when you contact support.
To debug problems and keep the Service secure.

We do not sell or rent personal data. Ever.

3. Where it lives

Your data is stored in a PostgreSQL database hosted by Supabase in the United States (AWS us-east-1). Every table is protected by row-level security — database rules that scope every query to your own account. The application itself is hosted on Vercel. Both providers process data on our behalf under their own privacy and security terms; neither uses your data for their own purposes.

Error reports and page counts. When something breaks, an error report (the error, the page, your browser type) goes to Sentry so we can fix it. We don't send your bill data, your email or a recording of your screen with it. We also use Vercel Web Analytics to count page views. It doesn't use cookies and doesn't identify you.

Zero, the optional AI helper. Zero is off by default. If you turn Zero on in Settings, then each time you pick one of his pre-written questions we send a summary of the data that question needs to OpenAI to write the answer. Depending on the question, that summary can include bill and account names, amounts, due days, categories, who funds what, recent payment amounts and days, card and loan balances, APRs, credit limits and minimum payments, rental income you logged in the last 90 days, and your take-home pay and pay schedule. We never send addresses, card digits, policy numbers, notes, links or your email. Nothing is sent while Zero is off, and closing Zero or turning him off mid-question cancels the request. We keep your latest 10 answers for up to 7 days so you can reopen them without asking again, and you can clear them any time. If you approve one of Zero's rename suggestions, we keep a small record of the old and new name so you can undo it. Zero never changes anything without your approval. OpenAI processes the summary under its API data terms and does not train on it.

4. Cookies

Zerofy uses only the cookies required to keep you signed in (Supabase authentication session cookies). There are no advertising or cross-site tracking cookies, and our page-view counting (Vercel Web Analytics) doesn't set any.

5. Retention

Your data is kept while your account is active, with automatic housekeeping: detailed monthly payment records older than 12 months and payment audit history older than 36 months are deleted on a rolling basis. You can export everything as CSV from Settings at any time.

When you delete your account (email support@zerofyapp.com), your data is permanently deleted from the production database. Residual copies in encrypted backups expire on the backup provider's rolling schedule (currently up to 30 days).

6. Your rights

You can access, correct, export, or delete your data. Editing and CSV export are self-service in the app; for full account deletion or anything else, email support@zerofyapp.com and we'll handle it promptly. Depending on where you live (e.g. the EU/EEA under GDPR or California under CCPA) you may have additional statutory rights — contact us and we'll honor them.

7. Children

The Service is not directed at children and may not be used by anyone under 18. We do not knowingly collect data from children.

8. Changes

If this policy changes materially, we'll notify you by email or an in-app notice before the change takes effect. The “Last updated” date at the top always reflects the current version.

9. Bank discovery (optional)

Connecting a bank is optional. These bank privacy details are the same text saved with your bank consent (version bank-privacy-v1; Effective October 15, 2026 for the private bank pilot.)

What we receive and save

Connecting a bank is optional. Zerofy uses Plaid to find recurring bill suggestions. Plaid and your bank handle sign-in; Zerofy does not receive your bank password or move money.

We receive connection and account information and transaction and recurring activity responses. Responses can include balances and accounts you shared in Plaid but did not select in Zerofy. We request 180 days of history; availability depends on your bank and Plaid. We do not save raw transaction history or balances for discovery.

For accounts you select in Zerofy, we save account names, masked digits, currency and identifiers, recurring descriptions, amounts, dates, frequency, activity status and your review decisions. Selecting fewer accounts in Zerofy limits the evidence we save; it does not revoke permissions you gave in Plaid.

How bank information is used

We use this information to create and refresh suggestions, show changes in recurring patterns, manage permissions and complete connection recovery and removal. Suggestions may be incomplete, delayed or wrong. You review and save bills yourself; bank discovery does not verify payment or cancel subscriptions.

Supabase stores the application data and Vercel runs the application. Bank access credentials are encrypted in restricted server storage. Recovery requires restricted operational access. Bank credentials and financial payloads are excluded from routine application analytics and error reports.

Plaid receives your Zerofy account identifier to associate the connection. Plaid's own collection, retention and privacy controls are described in its End User Privacy Policy, linked below. Removing a Zerofy connection does not guarantee immediate deletion of all information Plaid holds.

Saved bills and Zero

Bank discovery does not send raw transactions, connected-bank account details or recurring evidence to Zero. A suggestion you approve and save becomes an ordinary bill. Its saved fields may be included in summaries sent to OpenAI when you separately enable Zero and request a relevant answer. Disconnecting does not delete saved bills or saved Zero answers.

Session information and consent records

Essential bank setup and reconnect cookies expire after 30 minutes. Browser session storage holds an opaque setup request identifier, not bank tokens or account data. Plaid's connection flow has its own privacy practices.

We record the notice and these bank privacy details, their versions, when you accepted, the setup or reconnect session and the account identifiers you confirmed. This proof is stored separately from live bank evidence and currently remains after disconnect or account deletion.

Disconnecting, deletion and retention

Disconnect in Settings to stop scans and delete live bank account details, recurring suggestions and bank-to-bill links. Saved bills and payments remain. Provider removal is queued separately, with encrypted access retained for cleanup while it is pending. Closing Plaid or seeing an empty connection list does not prove that provider access was removed.

Deleting your Zerofy account removes ordinary tracking records and live bank evidence. Restricted setup, cleanup and consent records can remain afterward. Interrupted setup or removal must be resolved before we can confirm provider cleanup.

Once provider removal is confirmed, the consent receipt is minimized and deleted 30 days later, and the setup record 30 days after confirmation. A setup that never reached a bank is deleted 30 days after cancellation. Deletion evidence (identifiers and timestamps only) is kept up to 90 days in a private store outside database backups so a restored backup cannot resurrect deleted bank data. Interrupted setup or cleanup records stay until resolved.

Access to your bank data and requests

Settings offers a separate JSON download of saved bank-discovery data, consent history and setup or cleanup status. It excludes credentials, internal security records, information held only by Plaid, logs and backups. Tracking CSV downloads cover supported tracking records.

For requests not covered by these downloads, including requests after account deletion, contact support@zerofyapp.com. Do not send bank passwords, security codes, access tokens or bank statements. We must verify the requester before disclosing personal records. Provider cleanup and deletion from Zerofy are separate outcomes.

During the private pilot the Zerofy operator handles privacy and recovery requests, verifies the requester before any disclosure or deletion, and delivers records through the signed-in Settings download or an encrypted file.

10. Contact

Privacy questions or requests: support@zerofyapp.com. See also the Terms of Service.