SetBucks Privacy Policy

Effective date: September 3, 2026
Last updated: September 3, 2026

SetBucks is operated by FCS Development LLC ("SetBucks", "we", "us"), a South Carolina limited liability company. This policy explains what we collect, why, who we share it with, and what we do to protect it.

We wrote this to be read. Where something is a limitation rather than a promise, we say so.

1. Who this applies to

This policy applies to everyone who uses SetBucks at app.setbucks.com or any related service we operate.

SetBucks is available only to individuals 18 years or older in the United States. We do not knowingly collect information from anyone under 18. If we learn that we have, we delete it.

2. What we collect

Information you give us

Account information: your email address, your password (stored only as a cryptographic hash, never in a readable form), your display name, and an optional profile picture.
Your financial records: the accounts, categories, transactions, transfers, recurring plans, and notes you create in the app. This is the core of the service.
Your preferences: your time zone, appearance settings, and which notification emails you want.
Anything you send us: support messages, and, if you use our Inbox feature, the emails you forward to your SetBucks inbound address and the files you upload.

Information we collect automatically

Technical information needed to operate and secure the service: IP address, browser type, and timestamps of requests. We use this for security, abuse prevention, and diagnosing problems.
Authentication state: cookies required to keep you signed in and to record your time zone. We do not use advertising cookies or third-party tracking pixels.

Information from your bank, if you choose to connect one

If you connect a bank account, Stripe retrieves it on your instruction and passes us your transaction history and your current balance, along with the name of the institution, the kind of account it is, and the last four digits of the account number. This access is read-only. We cannot move money, make payments, or change anything at your bank.

Why we ask for the balance. So you do not have to type it. If connecting your bank creates a new account in SetBucks, we use the balance once, at that moment, to set that account's starting figure, so your balance in SetBucks matches your bank without you checking and copying it. If you instead link the connection to an account you already created, we do not use it at all: that account already has a starting figure you set. We do not store your bank balance or track it over time. What we keep is the starting figure of your account, which is a number you can see and edit.

We ask for transactions and balance, and nothing else. Stripe is also able to supply the account owner's name and mailing address, and account details usable to move money. We do not request either, so they do not appear on the consent screen you are shown, and they never reach us.

We never see or receive your bank username or password. You enter it with your bank, or with Stripe where your bank does not offer a direct login, never with us.

Information related to payment

Subscription payments are processed by Stripe. Your card number never reaches our servers. We receive from Stripe only what we need to run your subscription: whether it is active, when it renews, the last four digits and brand of your card, and your billing history.

3. What we do with it

We use your information to:

provide the service: store, organize, calculate, and display your financial records;
generate the projections, summaries, and reports you asked for;
send the notification emails you turned on, and the account emails you cannot turn off (password resets, verification codes, security notices, and required billing notices);
process your subscription and prevent payment failures;
protect the service and your account: rate limiting, fraud prevention, and investigating abuse;
comply with our legal obligations.

We do not sell your personal information. We do not share it for advertising. We do not use it to build profiles for anyone else.

4. Who we share it with

We share information only with the service providers we need to operate, and only what each one needs. Each is contractually required to protect it and to use it only to provide services to us.

Provider	What it handles	What it can see
Supabase	Database, authentication, file storage	Your account and financial records, encrypted at rest
Vercel	Application hosting	Traffic and technical logs
Stripe	Subscription payments, and connecting your bank if you choose to	Your email and payment details, and the transactions from any bank you connect. We never see your card number or your bank login
Resend	Sending our emails	Your email address and the content of emails we send you
Upstash	Rate limiting	Short-lived counters. No financial data
AI provider	Parsing forwarded emails and powering assistant features, if you use them	The specific content being processed

We may also disclose information if we are legally required to, to protect our rights or the safety of others, or in connection with a merger or sale of the business, in which case we will notify you before your information becomes subject to a different policy.

5. Artificial intelligence

Some features use AI to read text you provide and propose structured results. For example, forwarding a receipt so SetBucks can suggest a transaction.

Our commitments:

Your data is never used to train AI models. Not by us, and not by our AI providers, whose commercial terms prohibit training on content submitted through their API.
AI never writes to your records on its own. It produces a suggestion. Nothing enters your ledger until you approve it.
Only what is needed is sent. We send the specific content being processed, not your account history.
Raw source material is not kept. Once we extract the structured result from a forwarded email, the original message is deleted within 7 days.

6. How we protect your information

All traffic is encrypted in transit. All data is encrypted at rest.
Every record is isolated at the database level, so a query made as you can only reach rows that belong to you.
Two-factor authentication is available and we encourage it. Sensitive actions require your password again, even when you are already signed in.
We hold no bank credential of yours. A bank connection lives at Stripe, and our database keeps only a reference to it, which does nothing without a key we store outside the database. A complete database compromise alone does not reach your bank.
We maintain a written information security program, with a designated individual responsible for it.
Access to production systems is limited and logged.

No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach affects your information, we will notify you as required by law.

7. What we can and cannot see

We want to be precise here, because vague claims in this area are common and misleading.

We can technically access your records. The service reads your data on our servers in order to calculate balances, generate recurring entries, produce your reports and emails, and power assistant features. A system that could not read your data could not do any of that. Claims of "zero knowledge" or "end-to-end encryption" by any personal finance app that offers these features are not accurate.

What we commit to instead:

Nobody at SetBucks reads your transactions as part of operating the service.
We have not built, and will not build, an internal console that displays a user's financial activity.
Direct database access is reserved for operational emergencies, is restricted, and is logged.
Support is handled from what you tell us, from error logs that contain no personal information, and from aggregate metrics.
We never hold your bank credentials at all, and reaching a bank connection requires a key that lives outside the database, so full database access does not open one.

8. How long we keep it

We keep your information while your account is open.

Cancelling your subscription does not delete anything. Your data stays so you can return.
Deleting your account removes your data from our active systems immediately. Backup copies that already contain it expire within 30 days.
Forwarded emails and uploads used by the Inbox are deleted within 7 days of processing.
We may retain limited records longer where the law requires it, such as billing records for tax purposes.

9. Your choices

Access and export. You can view and export your data from the app at any time, in PDF, XLSX, or CSV.
Correction. You can edit any record yourself.
Deletion. You can delete your account from Settings. This is permanent.
Bank connections. You can disconnect a bank at any time, which stops all further access.
Emails. You can turn off any notification email in Settings or through the unsubscribe link. Account and billing emails required to operate your account will still be sent.
Requests. If you want a copy of your information or want it deleted and cannot do it in the app, email us and we will handle it, regardless of which state you live in.

10. Changes to this policy

If we make a material change, we will notify you by email and update the date at the top. Continuing to use SetBucks after a change means you accept the updated policy.

We also provide this policy annually to active customers, as required for financial services.

11. Contact

FCS Development LLC
South Carolina, United States
contact@setbucks.com

For privacy questions, write to contact@setbucks.com with "Privacy" in the subject line.