Privacy Policy
Last updated: July 22, 2026
1. Our Commitment to Your Privacy
At TracFi ("we", "our", or "us"), founded by Regu Ram, we believe your financial data is strictly your own. Unlike conventional financial aggregators that monetize user spending behavior, TracFi is engineered with a strict Zero Third-Party Data Monetization Policy. We will never sell, rent, or trade your personal or financial data to advertisers or third-party data brokers.
2. Information We Collect
We collect only the essential information necessary to operate your wealth engine:
- Account Credentials: Full name, email address, phone number, and encrypted password hash.
- Financial Records: Bank account titles, transaction entries, savings vault targets, financial goal milestones, precious metal holdings, and category budget limits.
- Workspace Metadata: Workspace Hex IDs, invitation statuses, and tenant roles (owner, partner, member).
3. Multi-Tenant Workspace Data Isolation
TracFi enforces hardware and database-level isolation between different workspaces:
- Personal Workspaces: Visible exclusively to you. No other user can inspect your personal accounts or transactions.
- Couple & Family Workspaces: Shared only among explicitly invited workspace members. If a user is removed from a shared workspace, their personal financial records automatically migrate safely back to their Personal Workspace.
4. Security Safeguards
We employ enterprise-grade security protocols to protect your account against unauthorized access:
- Password Encryption: All user passwords are salted and hashed using industry-standard
bcryptalgorithms. - Two-Factor Email OTP (2FA): Admin and sensitive actions require a 6-digit numeric OTP code delivered via Hostinger SSL SMTP.
- CSRF & Rate Limiting: All forms are protected against Cross-Site Request Forgery and brute-force login attempts.
5. Your Data Rights
You retain full control over your data. You may request data export or account closure at any time through our Support Desk.