Privacy Policy

1. Information We Collect

When you create an account, we collect your email address and a hashed password. When you use Leakage Finder, we process the CSV files you upload to perform billing reconciliation. We also collect basic usage data such as page views and product interaction events to improve the product.

2. How We Use Your Data

• Reconciliation — Your uploaded CSV data is processed server-side to match vendor billing against PSA billing. Results are stored in your account.
• Authentication — Your email and password are used solely to authenticate you. Passwords are hashed and never stored in plain text.
• Billing — If you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number. Stripe's privacy policy applies to payment data.
• Product improvement — Anonymized product analytics help us understand page flow, audit workflow milestones, upgrade decisions, and repeat usage. We do not sell your data to third parties.

3. Data Storage & Security

Your data is stored in Supabase with row-level security (RLS) enabled. Each user can only access their own data. All connections use TLS encryption. CSV data is processed in memory and stored only as structured results — we do not retain raw uploaded files after processing.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties except as required to operate the service:

• Supabase — Database and authentication provider
• Stripe — Payment processing for paid plans
• Vercel — Hosting, infrastructure, and product analytics delivery
• Google Analytics — Traffic and product-interaction analytics

5. Your Rights

You may at any time:

• Request a copy of your stored data
• Request deletion of your account and all associated data
• Update your email address or password

To exercise these rights, contact us at support@leakagefinder.com.

6. Cookies and Analytics

We use essential cookies for authentication session management. We do not use advertising cookies. We do use privacy-conscious analytics tools to understand page views and product milestones such as CTA clicks, sign-in and sign-up starts, audit starts and completions, history views, and billing actions.

We do not send uploaded CSV contents, client names, billing rows, or other sensitive operational data to analytics tools.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance.

8. Contact

Questions about this policy? Email support@leakagefinder.com.