Privacy Policy

Overview

basilmojito helps you upload statement PDFs, extract transactions, categorize spending, and view reports, trends, and calendar summaries. This policy explains what data is collected, how it is used, and when it is deleted.

Information We Collect

• Google sign-in information: your Google account ID, email address, name, and profile image URL, provided through Google OAuth.
• Uploaded statement PDFs: statement files you choose to upload for processing.
• Parsed statement data: statement metadata such as filename, file hash, closing date, account number when present in the statement, balances, transaction dates, descriptions, vendors, categories, amounts, transaction types, and report summaries.
• Processing data: parse job IDs, job status, timestamps, and error messages when processing fails.
• Feature suggestions: suggestions you submit through the website, optional email address if provided, page path, user agent, and submission timestamp.
• Session data: session cookies used to keep you signed in.
• Operational logs: logs generated by Cloudflare Workers for debugging, security, and reliability.

How We Use Your Data

• To authenticate your account and keep your data separated from other users.
• To parse uploaded statement PDFs into transactions and reports.
• To categorize transactions and display spending reports, trends, and calendar views.
• To detect duplicate uploads and track processing status.
• To operate, debug, secure, and improve the service.
• To review feature suggestions and, if you provide an email address, follow up about your suggestion.

Uploaded PDF Handling

Uploaded statement PDFs are stored temporarily while they are processed. After processing finishes, whether it succeeds or fails, the uploaded PDF is deleted from object storage. The app stores parsed data separately so reports and trends can be shown without retaining the original PDF.

Transaction Data Retention

Parsed statement data is retained so you can view historical reports, trends, vendors, and daily spending. You may request deletion of your account data at any time.

AI Categorization

basilmojito may send transaction descriptions or vendor-like text to Cloudflare Workers AI to categorize transactions. Uploaded statement PDFs are not sent to the AI categorization step. The app may cache vendor-category mappings to avoid re-categorizing the same vendor repeatedly. Where data is used with third-party services for analytics, debugging, product improvement, or similar operational purposes, we use anonymized or de-identified data when it is not necessary to process identifiable account data.

Third-Party Services

• Google: used for sign-in. basilmojito does not receive or store your Google password.
• Cloudflare: used to host the app, database, object storage, queue processing, AI categorization, static assets, and logs.

Data Sharing

We do not sell your personal data. Identifiable data is shared only with service providers needed to operate basilmojito, such as Google for authentication and Cloudflare for hosting and processing. We may share anonymized or de-identified data with third-party services for analytics, debugging, product improvement, security, or operational purposes. Anonymized or de-identified data is not intended to identify you personally.

Security

The app uses Google OAuth rather than passwords. User data is scoped by account in the database. Admin access is limited to a static allowlist of administrator email addresses. No system can be guaranteed completely secure, but the service is designed to minimize retained sensitive files by deleting uploaded PDFs after processing.

Your Choices

You may stop using the service at any time. To request deletion of your account or parsed statement data, contact admin@basilmojito.com from the email address associated with your account.

Changes To This Policy

This policy may be updated as basilmojito changes. Material updates will be reflected by changing the effective date on this page.

Contact

Questions or deletion requests can be sent to admin@basilmojito.com.