Privacy Policy

Pesalytics is provided by Kraftti Systems ("Kraftti", "we", "us"). This policy explains what personal information we collect through Pesalytics and our free tools, how we use it, who we share it with, and the choices you have. Kraftti is responsible for your information as described here.

We collect only what we need to run the service:

• Account details from Kraftti Auth, our sign-in service: your name, email address and profile picture. We never see or store your password.
• Financial information you enter: accounts and balances, transactions, investments, bills, goals, debts, budgets, categories, tags and notes. Pesalytics only knows what you (or people you've given access to) record.
• Workspace information: workspace settings, members, roles and invitations.
• Technical and security information: your IP address, browser and device type, and session details when you sign in or make changes, which we use for security and activity records.
• Connected-app tokens: when you create an access token for an app such as an AI assistant, we store a name, the last few characters and usage dates. The token itself is stored only in a protected, non-reversible form.
• Text you paste into tools such as the SMS import, used to pre-fill a transaction for you to review.

Our public calculators and planners, such as the salary planner, work in your browser. The numbers you type into them are used to show you results on your screen and are not sent to your Pesalytics account or saved by us, unless you choose to share or copy the result yourself.

We use your information to:

• provide Pesalytics: show your balances, net worth, budgets, bills, goals and reports;
• keep your workspace secure, including activity records of who changed what and when, and sign-in and security events;
• send service messages you ask for or need, such as bill reminders and workspace invitations;
• let you connect third-party apps to read your data, when you choose to;
• fix problems, understand how the service is used and improve it;
• meet legal obligations and protect our rights.

Depending on where you live, data protection law requires us to have a legal reason for using your information. In general we rely on: providing the service you asked for (contract); our legitimate interests in running, securing and improving Pesalytics; your consent where we ask for it, which you can withdraw; and legal obligations.

We don't sell your personal information, and we don't use your financial data for advertising. We share it only as follows:

• People you invite: members of a workspace can see its data at the access level the owner gave them.
• Apps you connect: if you create an access token for an app such as an AI assistant, that app can read your data. We try to share only what a connection needs, but what that app does with it is governed by its own terms and privacy policy. You can revoke access at any time in Settings.
• Service providers that help us run Pesalytics, for example hosting, database, email delivery and error monitoring. They may process information only for us and under appropriate safeguards.
• Authorities or others when required by law, or to protect rights, safety and the security of the service.
• A successor, if Kraftti is involved in a merger, acquisition or sale of assets. We'll tell you if that changes how your information is handled.

We keep your workspace data for as long as your account is active. Activity records (the history of changes, sign-ins and security events) are visible to the workspace owner and kept for a set period, generally several years, to support security, accountability and legal obligations, even if the underlying record is later deleted.

If you ask us to close your workspace, we remove your financial data within 30 days. We may keep limited records, such as activity records or information we're legally required to keep, for as long as the law or a legitimate purpose requires.

We use measures such as encryption in transit, access controls between workspaces, hashed access tokens and activity records. No online service can guarantee perfect security, so please use a strong sign-in method, keep tokens private and only invite people you trust.

Depending on your location, you may have the right to access the personal information we hold about you, correct it, delete it, export it, object to or restrict certain uses, and withdraw consent. You can already edit or delete most of your data inside the app and export it from your workspace. For anything else, contact us and we'll respond within a reasonable time.

If you're unhappy with how we handle your information, you can also complain to your local data protection authority.

We use a first-party session cookie to keep you signed in and secure. It's strictly necessary, so it's always on. We don't use advertising cookies.

We also use Vercel Analytics to record anonymous page views, such as which pages are visited. It doesn't use cookies or identify you personally, and it stays off unless you allow it in the banner. You can change or withdraw your choice at any time from "Privacy settings" in the footer.

To be able to show what you agreed to and when, we keep a record of each cookie choice: a random identifier stored in your browser, your choice, the wording version you saw, the time, the page you were on, your IP address and browser details, and your account if you were signed in.

Our providers may process information in countries other than where you live. Where we transfer information internationally, we take steps to make sure it stays protected as required by applicable law.

Pesalytics is for people aged 18 and over (or the age of majority where you live). We don't knowingly collect information from children. If you think a child has given us information, contact us and we'll delete it.

We may update this policy from time to time. When we make a material change we'll update the date at the top of this page and, where appropriate, tell you in the product.

Questions or requests about your information? Reach us through the contact options on our website, or from within the app.