figtracklogo
FigTrack
Your Privacy is Protected

Privacy Policy

Effective Date: November 1, 2023 | Last Updated: October 22, 2025

We believe in complete transparency about how we collect, use, and protect your personal information. This policy explains everything you need to know.

Privacy at a Glance

What We Collect

Only email, encrypted password, and your expense data

How We Protect

TLS 1.3 encryption + AES-256 at rest

Never Sold

We will never sell your data to anyone

You Control

Access, export, or delete your data anytime

1. Our Privacy Commitment

At Figtrack, your privacy is our top priority. We are committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data.

This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of information that applies to our application and services.

We believe in data minimization – we only collect what we need to provide you with excellent service.

2. Information We Collect

2.1 Information You Provide

  • Email Address: Required for account creation, authentication, and important service communications
  • Password: Collected in plain text but immediately encrypted using industry-standard hashing algorithms (bcrypt with salt) before storage
  • Expense Data: Including descriptions, amounts, dates, categories, tags, and notes you manually enter
  • Profile Information: Optional details such as display name and currency preferences

2.2 Automatically Collected Information

  • Device Information: Browser type, operating system, and device identifiers
  • Usage Data: Features you use, pages visited, time spent on the application, and interaction patterns
  • Log Data: IP addresses, access times, and error logs for security and troubleshooting purposes
  • Cookies and Similar Technologies: Session cookies for authentication and functional cookies for preferences

2.3 Receipt Image Data

  • Receipt images uploaded through our scanner are processed temporarily
  • We extract only: merchant name, transaction amount, and transaction date
  • Original images are automatically deleted within 24 hours of processing
  • Extracted text data is stored with your expense records
  • We do not use receipt images for any purpose other than data extraction

3. Information We Do NOT Collect

We explicitly do NOT collect, store, or process:

• Bank account numbers or financial account credentials

• Credit card or debit card numbers

• Social security numbers or national identification numbers

• Biometric data

• Precise geolocation data

• Health or medical information

• Racial or ethnic origin, political opinions, or religious beliefs

Your financial security is paramount – we have designed our system to operate without accessing sensitive financial information.

4. How We Use Your Information

4.1 Primary Purposes

  • Account Management: Creating, maintaining, and securing your account
  • Service Delivery: Providing expense tracking, reporting, and analytical features
  • Communication: Sending service-related notifications, updates, and support responses
  • Personalization: Customizing your experience based on your preferences and usage patterns

4.2 Secondary Purposes

  • Security: Detecting, preventing, and responding to fraud, abuse, and security incidents
  • Analytics: Understanding usage patterns to improve features and user experience
  • Compliance: Meeting legal obligations and enforcing our terms of service
  • Development: Testing new features and improving application performance

5. Data Security Measures

5.1 Technical Safeguards

  • Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.3 protocol
  • Encryption at Rest: Your data is encrypted in our databases using AES-256 encryption
  • Password Security: Passwords are hashed using bcrypt with individual salts; we cannot reverse-engineer your password
  • Secure Infrastructure: Our servers are hosted in SOC 2 compliant data centers with 24/7 monitoring
  • Regular Security Audits: We conduct periodic security assessments and vulnerability testing

5.2 Administrative Safeguards

  • Access Controls: Strict role-based access controls limit who can access user data
  • Employee Training: All team members undergo security and privacy training
  • Data Access Logging: All access to user data is logged and monitored
  • Incident Response: We maintain a documented incident response plan for security breaches
  • Vendor Management: Third-party service providers are vetted for security compliance

5.3 Your Role in Security

  • Use a strong, unique password for your account
  • Enable two-factor authentication when available
  • Never share your account credentials
  • Log out from shared devices
  • Report suspicious activity immediately to handssistance@gmail.com

6. Data Sharing and Disclosure

We do NOT sell, rent, trade, or otherwise transfer your personal information to third parties for their marketing purposes.

We may share your information only in the following limited circumstances:

6.1 Service Providers

  • Cloud hosting providers for data storage (with data processing agreements)
  • Email service providers for transactional communications
  • Analytics providers for anonymized usage statistics (with IP anonymization)
  • All service providers are contractually bound to protect your data and use it only for specified purposes

6.2 Legal Requirements

  • When required by law, court order, or government regulation
  • To protect our rights, property, or safety, or that of our users
  • To investigate or prevent illegal activities or violations of our terms
  • In connection with a merger, acquisition, or sale of assets (with notice to you)

6.3 With Your Consent

  • We will obtain your explicit consent before sharing your data for any purpose not covered in this policy

7. Data Retention and Deletion

7.1 Retention Periods

  • Active Account Data: Retained for as long as your account remains active
  • Expense Records: Retained until you delete them or close your account
  • Receipt Images: Automatically deleted within 24 hours of upload
  • Log Files: Retained for 90 days for security and troubleshooting purposes
  • Backup Data: Retained for 30 days in secure backup systems

7.2 Account Deletion

  • You can request account deletion at any time through settings or by contacting support
  • Upon deletion request, your account is deactivated immediately
  • All personal data is permanently deleted within 30 days
  • Some information may be retained in backup systems for up to 90 days
  • We may retain minimal information as required by law or for legitimate business purposes (e.g., fraud prevention)

8. Your Privacy Rights

You have the following rights regarding your personal information:

8.1 Access and Portability

  • Right to Access: Request a copy of all personal data we hold about you
  • Right to Portability: Receive your data in a structured, machine-readable format (Excel, CSV, JSON)
  • Export Feature: Use our built-in export feature to download your expense data at any time

8.2 Correction and Deletion

  • Right to Rectification: Update or correct inaccurate personal information
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Direct Control: Edit or delete expense records directly through the application

8.3 Control and Objection

  • Right to Restrict Processing: Limit how we process your data
  • Right to Object: Opt out of certain data processing activities
  • Right to Withdraw Consent: Revoke previously given consent at any time
  • Communication Preferences: Opt out of non-essential emails

8.4 Exercising Your Rights

  • Email: handssistance@gmail.com
  • Response Time: We will respond to requests within 30 days
  • Verification: We may require identity verification to protect your security
  • No Charge: Rights requests are free of charge (unless excessive or repetitive)

9. Cookies and Tracking Technologies

9.1 What We Use

  • Essential Cookies: Required for authentication and core functionality
  • Functional Cookies: Remember your preferences and settings
  • Analytics Cookies: Help us understand how users interact with our application (anonymized)
  • We do NOT use advertising or tracking cookies

9.2 Your Cookie Choices

  • You can control cookies through your browser settings
  • Disabling essential cookies may affect application functionality
  • You can opt out of analytics cookies in your account settings
  • We respect "Do Not Track" browser signals

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence.

We ensure adequate protection through:

• Standard Contractual Clauses approved by relevant authorities

• Ensuring service providers maintain equivalent data protection standards

• Implementing technical and organizational security measures

By using our service, you consent to the transfer of your information to our facilities and service providers globally.

11. Children's Privacy

Figtrack is not intended for use by individuals under the age of 13 (or 16 in the European Economic Area).

We do not knowingly collect personal information from children under these age limits.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at handssistance@gmail.com.

Upon notification, we will promptly delete such information from our systems.

12. Third-Party Links and Services

Our application may contain links to third-party websites, services, or integrations.

We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party services you access.

This Privacy Policy applies only to information collected by Figtrack.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, disclose, and sell

• Right to Delete: Request deletion of your personal information

• Right to Opt-Out: We do not sell personal information

• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at handssistance@gmail.com with "CCPA Request" in the subject line.

14. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process data based on consent, contract performance, legal obligation, and legitimate interests

• Data Protection Officer: Contact handssistance@gmail.com for privacy concerns

• Supervisory Authority: Right to lodge a complaint with your local data protection authority

• Automated Decision-Making: We do not make solely automated decisions that significantly affect you

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

Material changes will be communicated through:

• Email notification to your registered email address

• Prominent notice on our application

• Update to the "Last Updated" date at the top of this policy

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

Continued use of the application after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Team

Email: handssistance@gmail.com

Security Issues: handssistance@gmail.com

Data Protection Officer: handssistance@gmail.com

General Support: handssistance@gmail.com

We aim to respond to all privacy inquiries within 48 hours.

For urgent security matters, please use our security email for fastest response.

Our Commitment to Your Security

🔐

256-bit Encryption

Bank-level security for all your data

✓

GDPR Compliant

Meeting European privacy standards

🛡️

CCPA Compliant

California privacy rights respected

⚡

SOC 2 Hosting

Enterprise-grade infrastructure

Questions About Your Privacy?

We're here to help. Our privacy team is dedicated to ensuring your data remains secure and your rights are protected.

Contact Privacy Team Read Terms & Conditions

Need to exercise your rights? Email us at handssistance@gmail.com with your request and we'll respond within 30 days.

💰
📊
💳
📈
💼
✏️

Empowering your financial journey with intelligent tracking, insights, and growth opportunities.

Need Help?

Our support team is here to assist you with any questions about your financial tracking.

Privacy Policy Terms of Service

© 2026 Figtrack. All rights reserved.