Privacy Policy

1. Who we are

This Privacy Policy describes how Inzolo (“Inzolo,” “we,” “us,” or “our”) handles personal information in connection with the Inzolo web application and related services (the “Service”). If you have questions, contact us at privacy@inzolo.com.

2. Information we collect

Information you give us

• Account information — your email address and authentication credentials (passwords are stored only as salted hashes; we also support passkeys, where we store public-key credentials only).
• Budget data you create — household and budget names, accounts, categories and envelopes, allocations, transactions, debts, goals, reminders, and notes you enter.
• Financial data you import — transactions and balances you bring in by uploading CSV or OFX/QFX files or by connecting an account through a provider (see below).
• Communications — messages you send us, such as support requests or product feedback.

Information from connected accounts

If you connect a financial institution through a data provider (such as Plaid or SimpleFIN), we receive the account and transaction data you authorize — typically balances, transaction amounts, dates, and descriptions. Provider access credentials are kept isolated from the rest of your data and are used only to sync the accounts you’ve linked.

Information collected automatically

Like most web services, we collect limited technical data needed to operate and secure the Service — for example, your IP address, browser type, and basic request logs. We keep this to what’s necessary and do not use third-party advertising trackers.

3. How we use your information

• To provide the Service: run your zero-based budget, import and deduplicate transactions, power the approval queue, and calculate debt payoff and reports.
• To suggest categories and provide coaching (see “AI features” below).
• To send service messages you’ve set up, such as reminders and approval nudges.
• To secure the Service, prevent abuse, debug problems, and meet legal obligations.

We do not sell your personal information, and we do not use your financial data for advertising.

4. AI features

Inzolo runs deterministic rules and your own approved history first. AI is used as a fallback only for uncertain cases — for example, suggesting a category for an unfamiliar payee, summarizing your week, or helping map CSV columns. When AI is used, the minimum necessary transaction details (such as a payee description and amount) may be sent to our AI provider to generate a suggestion or explanation.

AI suggestions are advisory: nothing changes an envelope balance until you approve it. We instruct our AI providers not to use your data to train their models, and we do not give them standing access to your account.

5. How we share information

We share personal information only as needed to run the Service:

• Service providers — infrastructure hosting, our financial-data provider(s), and our AI provider(s), each acting on our behalf under contract and only for the purposes above.
• Legal reasons — when required by law, to enforce our terms, or to protect the rights, safety, and security of users and the public.
• Business transfers — if Inzolo is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction; we’ll notify you of any change in control of your data.

We never sell your data to third parties.

6. How we store and protect your data

• Money is stored as exact integer cents in an append-only ledger, so the record of your finances is auditable and hard to silently corrupt.
• Connections are served over HTTPS; provider credentials are stored separately from your budget data.
• Access to production data is limited to what’s necessary to operate the Service.

No system is perfectly secure, but we take reasonable measures designed to protect your information.

7. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Backups are purged on a rolling schedule.

8. Your choices and rights

• Access and export — you can view your data in the app and request an export of your budget data.
• Correction and deletion — you can edit your data in the app and request deletion of your account.
• Disconnect accounts — you can unlink a connected institution at any time, which stops future syncing.
• Reminders — you control which reminders and emails you receive, including quiet hours.

Depending on where you live, you may have additional rights (such as under the GDPR or CCPA). To exercise any of these, email privacy@inzolo.com.

9. Cookies

We use only the cookies and local storage necessary to keep you signed in and remember basic preferences (such as your selected budget). We do not use advertising or cross-site tracking cookies.

10. Children

Inzolo is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we’ll delete it.

11. International users

Inzolo may process and store information in countries other than where you live. Where we transfer data, we take steps designed to ensure it remains protected consistent with this policy.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after changes take effect means you accept the updated policy.

13. Contact us

Questions or requests about your privacy? Email privacy@inzolo.com.