Privacy Policy

Last updated: April 17, 2026

EquiTerra ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

1. What we collect

We collect only what is necessary to provide the service:

• Account information — your email address and a hashed password when you create an account.
• Financial data you enter — account names, balances, categories, and entry dates that you manually input into the app. We never collect bank credentials, account numbers, or connect to any financial institution.
• Settings — preferences such as forecast years, lookback horizon, and birthday that you configure within the app.
• Subscription data — your subscription status and billing dates, provided by our payment processor Lemon Squeezy. We do not store full credit card information.

2. What we do not collect

• Bank credentials, OAuth tokens, or any form of financial institution access
• Browsing history or behavioral tracking data
• Device fingerprints or persistent advertising identifiers
• Data from third-party sources

3. How we use your data

• To provide and maintain the EquiTerra service
• To authenticate your account and keep your data secure
• To send transactional emails (account confirmation, password reset)
• To process payments and manage your subscription

We do not sell, rent, or share your personal data or financial data with any third parties for marketing or advertising purposes. Ever.

4. Data storage and security

Your data is stored in a Supabase-hosted PostgreSQL database with row-level security enforced — meaning your data is cryptographically isolated from other users. Data is encrypted at rest and in transit using TLS.

Access to your data requires authentication. No EquiTerra employee can access your financial entries without explicit permission from you.

5. Third-party services

We use the following third-party services to operate EquiTerra:

• Supabase — database and authentication infrastructure (supabase.com)
• Vercel — hosting and deployment (vercel.com)
• Lemon Squeezy — payment processing (lemonsqueezy.com)
• Resend — transactional email delivery (resend.com)

Each of these providers has their own privacy policies and security practices. We choose providers that take data security seriously.

6. Data retention

Your data is retained for as long as your account is active. If you cancel your subscription, your data remains stored for 90 days before being permanently deleted, giving you time to export it. You may request immediate deletion at any time by contacting us.

7. Your rights

You have the right to:

• Access all data we hold about you
• Correct inaccurate data
• Request deletion of your account and all associated data
• Export your data in a machine-readable format

To exercise any of these rights, email us at hello@equiterra.app.

8. Cookies

EquiTerra uses only functional cookies necessary to maintain your authenticated session. We do not use advertising cookies, tracking cookies, or any form of third-party analytics cookies.

9. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or a notice within the app. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Email us at hello@equiterra.app.