Every subscriber gets its own server instance. Your records and knowledge pages live on that instance and nowhere else. We do not sell your data, we do not share it with other users or with advertisers, and we do not keep a copy of it outside your server.
Effective 31 August 2026
01
Your account runs on a server provisioned for you alone. Statements, transactions, balances, positions, reports and knowledge pages are stored in that instance's own database and file system. There is no shared database, no pooled search index, and no copy of your records held elsewhere.
02
On your server: the documents you upload and everything derived from them. Centrally, and only what running the business requires: your email address, subscription and payment status (handled by our payment processor — we never see your card number), and minimal operational logs such as errors and uptime. Those logs are not your financial records.
03
We do not sell your data. We do not share it with other users or with advertisers. We do not build advertising profiles, and we do not use your financial records to train models — ours or anyone else's.
04
This is the one exception to everything above. Reading a statement, writing a review or answering a question requires a model, and those models run at third-party cloud providers. Your server sends the relevant content — statement text, an extracted page, the question and the context it needs — and nothing that identifies you: no name, no account, no credentials. We use providers under agreements that prohibit training on the content we send, but once content leaves your server it is handled under that provider's terms as well as ours. Statement arithmetic, caps, due dates and recommendations are computed in code on your server, not by a model.
05
Besides the AI providers we use a hosting provider for the servers, a payment processor for billing, and an email provider for account mail. If you choose to connect accounts through a bank-connection provider, that connection is read-only and its access URL is stored on your server. We also disclose data where the law compels it.
06
Your data stays on your server for as long as your subscription lasts. Delete a statement or an account inside the app and it is removed there. Cancel and delete your subscription and the whole instance is destroyed, backups included, within 30 days. Billing records are kept as long as tax and accounting law requires.
07
Instances are isolated from one another, traffic is encrypted in transit, and secrets are stored with restricted permissions on your server. Our staff do not read your financial data; access for support happens only with your explicit request. No system is perfectly secure, and we will notify you promptly if a breach affects your instance.
08
You can see, export, correct and delete your data from inside the app at any time, since it all sits on your instance. For anything held centrally — your email address and billing record — write to us and we will provide, correct or delete it as the applicable law requires.
09
Material changes to this policy will be announced in the app or by email before they take effect. Questions about privacy: contact@bytefuture.com