User Privacy Choices

This page explains the privacy controls available to Cash Copilot users. We do not sell personal data and we do not use your financial data for advertising.

Available choices

• Access: request a copy of the personal data linked to your account.
• Portability: export your account, billing, import, transaction, and authentication data in JSON format.
• Deletion: permanently delete your account and associated service data.
• Correction: ask us to correct inaccurate account or support information.
• Consent: reject or withdraw optional analytics and non-essential cookies.
• Objection or restriction: object to or restrict processing where GDPR gives you that right.

In-app controls

Authenticated users can use the app to request a data export or account deletion. These actions use protected API endpoints and require your active login session:

• POST /api/user/export returns a portable JSON data export.
• POST /api/user/delete permanently deletes the account after confirmation.

Email requests

If you cannot access the app, email privacy@cash-copilot.app from the address linked to your account. We may ask for additional verification before processing the request.

Response timing

We aim to respond to privacy requests without undue delay and within one month where GDPR applies. Complex or multiple requests may require additional time as permitted by law.

Limits

Deletion removes service data that is no longer required. Limited records may be retained where required for legal obligations, accounting, tax, fraud prevention, security, dispute resolution, or legal defence.

Last updated: 2026-04-14