Coinest← Back to Coinest

Privacy Policy

Last updated: August 2026

🔒

Your data is never sold or used for advertising.

We collect only what Coinest needs to operate. Approved service providers process data only to deliver the service, under data-protection terms. We use encrypted storage and database-level isolation to protect your financial information.

Our Privacy Commitment

At Coinest, we believe financial data is among the most personal information there is. Your trust is the foundation of everything we build, and we've designed Coinest from the ground up to protect it.

What We Collect

We collect only what's needed to provide the service:

  • Your email address — for account identification and communication.
  • Uploaded bank statements and receipts — processed to extract transaction data.
  • Transaction data — merchant names, amounts, dates, and categories derived from your documents.

What We Never Collect

  • Your bank login credentials — we never ask for them.
  • Payment or trading authority — bank connections are read-only and cannot move money.
  • Browsing history or activity on other websites — we don't track you.

How Your Data Is Protected

  • Data minimization: Bank statement originals are processed in memory and are not saved. Receipt files are uploaded for extraction and may be retained so you can review them in Coinest.
  • Encryption in transit: All data is transmitted over HTTPS with TLS encryption.
  • Encryption at rest: Data is stored on encrypted storage (AES-256).
  • Database isolation:Each user's data is isolated via PostgreSQL Row-Level Security (RLS).
  • Authentication: We use JSON Web Tokens (JWT) for sessions and bcrypt to hash passwords — your password is never stored in plaintext.

Data Sharing — We Don't

We never sell your data.We don't share your financial information with advertisers, data brokers, or any third party for their own purposes. The only external processing that touches your data is:

  • LLM API calls for categorization and document extraction. Depending on the feature, this can include extracted text or an uploaded receipt.

These providers act as service processors under commercial terms that prohibit model training on your data. Their limited operational retention, where applicable, is governed by those provider terms.

Data Retention

You can export your data or delete your account from within the application. Account deletion immediately removes the account and covered database records. Uploaded receipt files are not yet covered by that same deletion workflow; we are correcting this retention gap.

Your Rights (GDPR & Beyond)

Regardless of where you live, we extend these rights to all users:

  • Access: Export all your data in CSV or JSON format at any time.
  • Delete: Delete your account and covered database records directly in Settings. The retention limitation above currently applies to uploaded receipt files.
  • Portability: Take your data with you — no lock-in.
  • Transparency: Know exactly what we have and why.

Contact

Questions about your privacy? We take them seriously. Reach out at hello@adaptl.aiand we'll respond within 48 hours.