Privacy Policy

Last updated: November 2026

The Home Office is a private, invite-only personal financial-management application used by a single household to view its own finances. This policy explains what data we collect, how we use and protect it, and your choices.

Information we collect

  • Account information you connect via Plaid — account names, balances, transactions, investment holdings, and liabilities for the financial institutions you choose to link. You initiate every connection yourself.
  • Information you enter — entity details and manual asset/liability values for things banks can't see (e.g., private investments, real estate, vehicles).
  • Account & security data — your email and authentication factors (including two-factor authentication).

We never see or store your bank login credentials — bank authentication is handled directly by Plaid.

How we use your information

Solely to provide the service to you: to display your accounts, net worth, and cash flow, and to answer your own questions through the in-app assistant. We do not sell, rent, or share your financial data for advertising or any third-party marketing.

How we protect your information

  • All data is transmitted over HTTPS/TLS 1.2+.
  • Data is encrypted at rest; Plaid access tokens are additionally encrypted with AES-256-GCM, with the key held separately from the database.
  • Mandatory two-factor authentication on every login; invite-only access.
  • Fail-closed database row-level security isolates each household's data; least-privilege roles.

Service providers (subprocessors)

We rely on a small number of vetted providers to operate the service: Plaid (account connectivity), Supabase (database & authentication), Vercel (application hosting), and Anthropic (the AI assistant — only the data needed to answer your specific question is sent). These providers process data on our behalf under their own security and privacy commitments. We do not share your data with anyone else.

Data retention & deletion

We retain your data while your account is active. You can disconnect any institution at any time. Disconnecting revokes our access (/item/remove). That institution's past balances and transactions stay in your records, marked disconnected, until you ask us to delete them. You may request deletion of your account and stored data at any time, and we will delete it promptly, subject to any legal retention obligations.

Your consent

By creating an account and connecting your financial institutions, you consent to the collection, processing, and storage of your data as described here. Each Plaid connection also presents Plaid's own consent screen.

Contact

Questions about this policy or your data can be directed to the application owner via the email associated with the account.