Privacy Policy

Overview

ADDEMALL ("we", "us", "our") is a financial-data aggregation app that organises every way you make money into first-class "Money Makers" and reads them back to you in plain English. This page explains what we collect, what we do with it, and the choices you have.

By using ADDEMALL you agree to the practices below. If anything here is unclear, write to us — we would rather answer than hide behind legalese.

What we collect

We collect only what the product needs to do its job. We do not buy, rent, or sell user data — there is no ad network in this app.

• Account information (email, name, and authentication credentials handled by our identity provider — passwords are never stored in plain text on our servers).
• The Money Makers you create (their names, types, tax-rate settings, and any notes you attach).
• Every Made and Spent entry you log, plus the receivables you record (client names, invoice numbers, amounts in integer cents, statuses).
• Generated PDF documents (statements, invoices, summary exports) stored as encrypted objects in our document store.

Demo data

When you create a new ADDEMALL workspace we seed it with a small set of synthetic ledger rows and bank-style transactions so the All Together view is not empty on day one. This demo data is fictional; it does not represent real customers, real bank accounts, or real money. It exists to show the product working and is fully removable from your workspace.

Clearing the demo data does not delete your account, your Money Makers, or anything you logged yourself.

Bank feeds and Plaid

ADDEMALL integrates bank feeds through Plaid. The feature is currently connected to Plaid in Sandbox mode only. That means ADDEMALL never accepts real production bank credentials, never initiates real transactions, and never moves real funds.

Any balances, transactions, or accounts you see in a linked bank feed during the Sandbox period are synthetic and supplied by Plaid for development purposes.

When we enable production Plaid access, ADDEMALL will prompt for explicit re-consent, refresh this policy with the production processor details, and surface Plaid’s own privacy terms in the linking flow. The processor’s own privacy policy is available at https://plaid.com/legal/ regardless of mode.

Paid tiers and billing

Paid tiers (Maker, Pro, Studio) are processed through Stripe Connect on behalf of ADDEMALL. The Stripe checkout flow collects only the data Stripe needs to take payment — card details never reach ADDEMALL servers. The full billing disclosure is presented at checkout and inside the billing surface opened from your dashboard.

Where your data lives

Application data (account, Money Makers, Made/Spent entries, invoices, generated statements) is stored in a managed PostgreSQL database operated by our hosting provider.

Generated PDF documents are stored as encrypted objects in Cloudflare R2 via our content-storage proxy; object URLs are short-lived and scoped to your signed-in session.

Backups are encrypted at rest. We retain data while your account is active. If we wind down a service, we will give you at least 30 days written notice and a way to export.

Retention

We keep your data for as long as your account is active. If you delete a Money Maker, that Money Maker and its entries are removed immediately. Deleting your account removes your account row, your Money Makers, your Made/Spent entries, your invoices, and your generated PDF objects within 30 days (backups roll off within 90 days).

Authentication and security

Authentication is session-based and handled by the better-auth module. Passwords are hashed (never stored in plain text), sessions are signed with rotating cookie values, and we recommend you turn on the email-magic-link or passkey option if it is available on your account.

Document objects are fetched using short-lived signed URLs scoped to your user id — opening one of those PDFs in a public browser requires a fresh, valid session.

Your rights

You can exercise these rights without talking to a chatbot. The dashboard exposes the actions directly. If anything is not exposed yet, ask and we will pull the data for you.

• Export — every Money Maker has an export view, and the dashboard exposes a full workspace export on request.
• Rectify — edit any entry or Money Maker at any time; every edit is captured in the activity log on paid tiers.
• Delete — delete a Money Maker, an individual entry, or your whole account from the dashboard; deleted data leaves the product surface immediately and is purged from backups on the schedule above.
• Object or restrict — write to the contact address below; we will respond within 30 days.

Children

ADDEMALL is a financial product and is not intended for anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, write to the contact address below and we will delete the account.

Changes to this policy

When we make a material change we will surface a banner on the dashboard and update the "Last updated" date below. Earlier versions are kept on request so you can compare what changed.

Contact

Privacy questions, data requests, and complaints: addemall@polsia.app. We answer every message; if we have not replied within 30 days it is a bug, please write again.