Privacy Policy
ExactSplit ("we", "us") helps self-employed people in the United States estimate their taxes and keep their books. This policy explains what we collect, why, who else touches it, how long we keep it, and how to get rid of it. It is written to be read. If anything here is unclear, email hello@exactsplit.com.
The short version
We connect to your bank read-only through Plaid. We never see your bank login. We never move money at your bank. The optional wallet is run by Whop; if you switch on auto-split there, we move the tax share between your own wallets, and nowhere else. If you choose to share how you classify merchants with others in your trade, we pool only the merchant name and your verdict, never amounts, dates or anything that identifies you, and use a verdict only when at least three people agree. If you allow the partner who referred you to pay you into your wallet, we give that partner the wallet's bank deposit details and nothing else. Bank access tokens are encrypted before they are stored and are never returned by any part of the product. Your data is used to compute your estimate and keep your books, and for nothing else. You can delete everything by deleting your account, and deletion also revokes our access at the bank.
What we collect
Account information. Your email address and the identifier our authentication provider assigns you. We do not store passwords; authentication is handled by Clerk.
Financial data. When you connect a bank through Plaid we receive transactions (date, amount, merchant, description, category, and location when the bank provides it), account names and masked account numbers, and account balances. We receive an encrypted access token that lets us refresh this data. We do not receive your bank username or password at any point.
Information you enter. Your trade or occupation, filing status, other household income, withholding, prior-year tax and adjusted gross income, retirement contributions, health insurance premiums, state rate, business trips, estimated payments you tell us you made, and any corrections you make to how a transaction is classified.
Usage data. Server logs (IP address, browser, pages requested) kept for security and debugging, and an audit trail of significant actions on your account such as connecting or removing a bank, changing settings, and exporting data.
What we do with it
We use your data to compute your tax estimate, derive how much to set aside from each deposit, track your reserve, classify your transactions, produce exports for you and your preparer, and answer questions you ask about your own spending. We also use it to run the service: authentication, billing, security, and support.
We do not sell your data. We do not share it with advertisers. We do not use your financial data to train machine learning models, and we contractually prohibit our processors from doing so.
Who else processes it
We use a small number of service providers, each for one job:
- Plaid connects to your bank and delivers transactions and balances. Plaid's own privacy policy governs what it collects during the connection flow.
- Clerk handles sign-in, sessions, and account email.
- Supabase hosts our database in the United States.
- Vercel hosts the application.
- Cloudflare provides DNS and email routing for our domain.
- OpenAI classifies merchants. For classification we send merchant names, the direction of the transaction, a typical amount, and a transaction count, aggregated per merchant, together with the trade you told us. We do not send individual transaction dates, balances, or account details for classification. If you use the optional "Ask your books" feature, questions and relevant slices of your transaction data are sent to produce an answer. That feature is off by default and is enabled only once a data processing agreement and zero data retention are in place with the provider.
- Stripe processes payments. We do not receive your card number; Stripe does.
- Whop provides the optional ExactSplit Wallet. If you open one, we send Whop your email address and an internal identifier so it can create your account, and we store the Whop account identifier. Whop runs identity verification and holds wallet data under its own privacy policy; we do not receive your identity documents, and our servers do not read or store your wallet balance or activity.
Each provider is bound by contract to use your data only to provide its service to us.
How we protect it
Bank access tokens are encrypted with AES-256-GCM before they reach our database and are decrypted only inside server-side calls to Plaid. They are never written to logs in plain form and never returned by any endpoint. Every database query is scoped to your account at the data access layer, so one customer's data cannot be read by another. All traffic is encrypted in transit. Access to production systems is limited to the people who operate them.
Because we hold consumer financial information, we treat the Gramm-Leach-Bliley Act Safeguards Rule as applying to us and maintain a written information security program accordingly.
How long we keep it
We keep your data for as long as your account is open. Transaction history is retained across tax years because prior-year figures feed the current year's estimate. Server logs are retained for a limited period for security purposes. When you delete your account, your data is deleted as described below.
Deleting your data
Deleting your account deletes your transactions, accounts, rules, settings, trips, payments, and audit history from our database. Before that happens, we call Plaid to revoke our access to each connected bank, so the connection is gone at the bank as well as with us. If Plaid cannot be reached, we keep the record until the revocation succeeds rather than leave an active connection you can no longer see. You can remove an individual bank connection at any time from the dashboard.
Exports you have downloaded are your copies and are not affected.
Your rights
You can access and export your data at any time from the dashboard. You can correct any figure you entered. You can delete your account. If you are a California resident, you have the rights described in the California Consumer Privacy Act, including the right to know what we collect and the right to delete it; we do not sell personal information and we do not discriminate for exercising these rights. To make a request, email hello@exactsplit.com from the address on your account.
Children
ExactSplit is for adults running a business. We do not knowingly collect data from anyone under 18.
Changes
If we change this policy in a way that matters, we will email the address on your account before the change takes effect. The date at the top is the date of the current version.