Privacy Policy

• Your account: your name, email address, a hashed version of your password (never the password itself), whether you’ve confirmed your email, your currency and starting balance.
• Your financial data: balances and transactions from bank accounts you connect, transactions you import from CSV, and the dashboards and tiles you make.
• Questions to the AI assistant: what you ask and the figures it looks up to answer. We don’t keep your conversations on our servers; they stay in your browser tab.
• Feature updates: if you subscribe on the website, your name, email and what kind of business you run.
• How Lightcash is used: a short list of product events, like starting the demo, creating an account, connecting a bank or asking a question, with counts and outcomes. These never include your email, your financial figures or what you typed to the assistant. We also record errors so we can fix them.
• Technical data: your IP address and browser details in our server logs, used for security and to limit abuse.

The demo uses made-up sample data. If you type anything into a demo, it is deleted with the demo after 7 days.

• To run Lightcash: show your numbers, project them, and answer your questions.
• To keep your account secure: signing you in, resetting passwords and confirming your email.
• To send the emails you need, and feature updates if you subscribed.
• To understand which parts of Lightcash help people, and to find and fix problems.
• To meet legal obligations and stop abuse.

Where privacy law asks for a legal basis, these are running the service you asked for, our legitimate interest in improving and protecting it, your consent where we ask for it, and legal obligations.

We share data only with the companies that run parts of Lightcash for us, and only what each needs:

• Railway hosts our servers and database.
• Stripe (Financial Connections) connects your US bank accounts. You sign in to your bank in Stripe’s window; your bank credentials never reach us, and we receive only the accounts, balances and transactions you choose to share.
• Anthropic runs the AI assistant. Your question and the figures needed to answer it are sent to Anthropic’s API to produce the reply.
• Resend delivers our emails, such as password resets and email confirmation.
• PostHog, in the EU, stores our product events and error reports.
• Slack: when someone signs up, subscribes to updates or signs in, our team gets a message in our own Slack workspace with their email address, so we can welcome and help new customers.

We don’t sell your personal data or share it for advertising. We may disclose it if the law requires us to, to protect people’s safety or our rights, or to a buyer if Lightcash changes ownership, who would have to keep honouring this policy.

• Sign-in: a cookie called lc_session keeps you signed in for up to 7 days. Lightcash can’t work without it.
• Analytics: PostHog keeps an anonymous identifier in a cookie and your browser’s storage, so a visit can be counted once.
• Preferences: your theme, whether the sidebar and chat are open, and similar settings stay in your browser’s storage.

We don’t use advertising or cross-site tracking cookies.

• Your account and financial data: until you delete your account, which removes them straight away.
• Demo accounts: 7 days.
• Feature-update subscriptions: until you ask us to stop.
• Product events, error reports and logs: as long as they’re useful for improving and securing Lightcash.

Connections to Lightcash are encrypted, passwords are stored only as salted hashes, bank credentials never reach us, and access to your data is limited to running the service. No system is perfectly secure, and if a breach affects you we’ll tell you as the law requires.

• Export your transactions as CSV, and change your details, in Settings.
• Delete your account and its data in Settings.
• Disconnect a bank in Integrations, which stops new data arriving.
• Unsubscribe from feature updates by writing to us.

Depending on where you live (for example under the GDPR in the EU and UK, or state laws like California’s CCPA), you may also have the right to access, correct, delete or move your data, and to object to or restrict how we use it. Write to hello@getlightcash.com and we’ll respond within the time the law sets. You can also complain to your local data protection authority.

The companies above may process data outside your country, including in the United States. Where the law requires it, we rely on safeguards such as the European Commission’s standard contractual clauses.

Lightcash is for adults running a business. It isn’t meant for anyone under 18, and we don’t knowingly collect their data.

We’ll update this page when what we collect or how we use it changes. The date at the top shows the last change, and we’ll tell you in the app or by email about significant ones.

Questions or requests about your data: hello@getlightcash.com.