Privacy Policy

AXIEL Monetary (“AXIEL”, “we”) is a budgeting app. This policy explains what we collect, why, who processes it, and how you control it. We do not sell your data and we do not use it for advertising.

What we collect

• Account: your email, optional first name, and a one-way hash of your password (we cannot see your password).
• Bank data (only if you connect a bank): account names, types, last four digits, balances, and transactions (date, amount, description, merchant, category), received from Plaid.
• What you create: envelopes, goals, money you assign to them, and your conversations with Axiel.
• Security records: sign-in events, IP address and device/browser type, kept so you and we can spot suspicious activity.

We never receive or store your bank username or password — you enter those directly with Plaid.

How it’s protected

• All traffic is encrypted in transit (HTTPS/TLS). The database is encrypted at rest.
• Bank access tokens, transaction descriptions, merchant names, two-factor secrets and Axiel conversations are additionally encrypted per user with AES-256-GCM before they are stored.
• Passwords are hashed with scrypt. Optional two-factor authentication is available.
• The app is read-only toward your bank: it cannot move money.

Who processes your data

• Plaid — connects your bank. See Plaid’s End User Privacy Policy.
• Anthropic — powers Axiel. When you message Axiel, your message, recent conversation, and a summary of your balances, envelopes and spending are sent to generate the reply. Anthropic does not use API data to train its models.
• Vercel (hosting) and Neon (database).
• Resend (email) — only to send password-reset emails.
• Have I Been Pwned — when you choose a password, only the first 5 characters of its SHA-1 hash are sent to check it against known breaches. Your password never leaves our server.

Your control

• Disconnect any bank at any time in Settings — access is revoked at Plaid and that bank’s data is deleted.
• Download everything we hold about you in Settings → Your data.
• Delete your account in Settings — all of your data is permanently erased immediately. See Delete account.

Retention

We keep your data while your account exists. Deleting your account erases it from our database immediately; encrypted backups held by our database provider expire on their standard schedule.

Children

AXIEL is not intended for anyone under 18.

Contact

Questions or requests: the contact details on this site.