Privacy Policy

1. What we collect

• What you type into a conversation (for example your spending habits, budget and preferences), and the profile signals derived from it.
• The email address you provide when registering, and a hash of your password (we never store passwords in plain text).
• Technical data needed to keep you signed in (for example the login credentials we issue).
• Attachments you upload (PDF, JPG, PNG and WebP files) and their thumbnails; for PDFs, the page-level catalog built by the server.

2. Why we use it

• To generate recommendations, keep your conversation history, and let you review it at any time.
• To keep your account secure and prevent abuse.
• We do not sell your personal data.
• To read attachment contents when you ask, so we can answer questions about the file.

3. Storage and security

Accounts and conversations are stored in a database dedicated to this Service, separate from those of other products. Passwords are stored as hashes, and login credentials expire and can be revoked.

Attachment originals are stored in a private Cloudflare R2 object storage bucket, not on the application server's disk; they are read only through authorised requests.

Text extracted from attachments passes through basic PII masking (Hong Kong phone numbers and Hong Kong identity card numbers) before it is stored, but masking may still miss something; the image content of scanned pages and pictures is not PII-masked.

4. Third parties

• Conversations may be sent to a language model service (DeepSeek) to generate replies. The card data behind recommendations always comes from our local card database and is never invented by the model.
• Card images and issuer logos are served by us or by a content delivery network (CDN).
• Images in attachments, scanned pages and PDF page images are sent to DeepSeek as images to generate replies, so DeepSeek sees the original image content.
• The Service uses Google Analytics (GA4) to measure page views and traffic sources, solely to understand how the product is used. It is provided by Google and sets analytics cookies.

5. Tracking and local storage

The Service uses browser local storage to keep you signed in and remember interface preferences, and Google Analytics (GA4) cookies to measure anonymous traffic (page views, referrers, device type). It is not used for cross-site advertising or tracking, and it is not linked to your conversation content.

6. Retention and deletion

Conversations are kept until you delete them or ask us to delete your account; guest conversations are deleted automatically 7 days after creation, with no renewal. To access, correct or delete your data, contact us through the details on this site.

Attachments have separate limits: 14 days for guests and 90 days for signed-in users, on a rolling basis (counted from the last time the file is read). Expired attachments are cleaned up by the server. Signed-in users can delete attachments at any time from “My attachments”; guest attachments cannot be deleted manually and are removed automatically after 14 days.

When a signed-in user deletes an attachment, the server also removes the original, the thumbnail and any page images generated from that PDF.

7. Updates

If this policy changes, the update will be published on this page and the last-updated date at the top will be refreshed.