1. Introduction

FTT Shield ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1. Account Information

When you create an account, we collect information such as your email address and user ID. This information is processed through Supabase for authentication purposes.

2.2. Banking Data

We do not store your banking CSV files. All data processing occurs in ephemeral session memory.When you upload bank statements (CSV or XML files), the data is processed entirely in your browser's memory and is never transmitted to our servers or stored in our databases. The files are processed locally and discarded once your session ends.

2.3. Payment Information

Payment processing is handled by Paddle, our payment provider. We do not store or have access to your full payment card details. Paddle processes all payment transactions securely and in compliance with PCI DSS standards.

2.4. Usage Data

We may collect information about how you access and use the Service, such as your IP address, browser type, device information, and usage patterns. This data is used to improve the Service and ensure security.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your transactions and manage your subscription
• Send you service-related communications
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Third-Party Services

4.1. Supabase

We use Supabase for user authentication and account management. Supabase processes your email address and authentication credentials. Please refer to Supabase's privacy policy for more information about how they handle your data.

4.2. Paddle

We use Paddle for payment processing. Paddle handles all payment transactions and stores payment information securely. Please refer to Paddle's privacy policy for more information about how they handle your payment data.

5. Data Security

We implement appropriate technical and organizational measures to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Your banking data is processed entirely in your browser and is never transmitted to our servers, providing an additional layer of security.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide you with the Service. Banking CSV files are not stored and are processed only in ephemeral session memory.

If you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Right to access your personal information
• Right to rectify inaccurate information
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise these rights, please contact us through the support channels provided in the Service.

8. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

9. Children's Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us through the support channels provided in the Service.