Privacy Notice

Who controls your data

Derek Rinker, Bonne Terre, Missouri, United States, is the data controller for DimePilot. Contact dkrinker77@gmail.com about privacy or your rights.

Data and purposes

Account email, authentication identifiers and securely handled sign-in credentials enable account access and security. Financial data includes account names, masks, balances, transactions, categories, budgets, bills, notes, goals, and bank connection authorization tokens; we process these to provide your chosen budgeting and read-only bank services. DimePilot does not collect bank passwords in its own forms.

Support messages are used to respond to requests. Subscription identifiers, status, and billing dates are used to manage access. Device, IP address, usage and error information may be processed by hosting and authentication providers for operation, security, fraud prevention and troubleshooting.

These purposes rely on performance of our contract, legitimate interests in running and protecting the service, consent where required for optional bank access, and legal obligations. We do not use financial information for advertising or sell it.

Who receives data

Lovable Cloud provides hosting, database, authentication and supporting infrastructure. Plaid and your institution process your authorized bank connection and financial data; see Plaid’s privacy policy. Paddle receives purchase attribution and acts as Merchant of Record for payments, subscriptions, tax compliance and invoices; see Paddle’s privacy notice.

Service providers may also support security, operations and support. Professional legal/accounting advisers and authorities may receive information where necessary or legally required. Providers may process data internationally under their applicable contractual and legal safeguards.

Retention and deletion

Saved financial history remains while you keep your account; it does not expire merely because a transaction is old or your bank subscription ends. Disconnection revokes access but retains history unless you choose deletion. Confirmed account deletion blocks account activity while billing and bank cleanup completes, then erases personal financial data and authentication access. Minimal deletion and security records may be retained as needed to prevent replay or meet legal obligations; providers independently retain required billing, fraud and backup records under their policies. Other data is deleted or anonymized when no longer needed for its stated purpose.

Security and your rights

We use appropriate technical and organizational protections, including encrypted transport, protected server-side bank tokens, and owner-scoped data access. No system can guarantee absolute security. You can edit data, export transactions, disconnect banks, delete CSV transactions, or request account deletion. Depending on applicable law, you may request access, correction, erasure, portability, restriction, objection or withdrawal of consent by contacting us. We verify identity before sensitive requests and respond within applicable legal deadlines. You may complain to the relevant privacy authority.

Cookies and browser storage

Essential cookies and browser storage support sign-in, security, checkout and the clearly labeled local demo workspace. DimePilot does not intentionally add advertising cookies. Provider pages and payment services have their own storage policies. You can clear browser storage or manage cookies in browser settings; disabling essential storage may prevent sign-in or checkout. This service is not intended for children under 18.