Strata

Strata is a personal finance tracking tool. It lets you record and view financial information you enter yourself, optionally import balances and transactions from a bank or brokerage account through Plaid, and see projections and summaries calculated from that data. Strata does not move money, initiate payments, or act as a custodian of your funds; it only displays and organizes information.

You agree not to:

• Use Strata for any unlawful purpose, or to store or transmit data you don't have the right to.
• Attempt to gain unauthorized access to another user's account or data.
• Probe, scan, or attempt to circumvent the service's security or rate limits.
• Use automated means to create accounts or submit data at scale without our written permission.

You're responsible for keeping your login credentials confidential and for all activity under your account. Tell us right away if you suspect unauthorized access. You must provide a valid email address and be able to legally form a binding contract to use Strata.

Strata's name, logo, design, and underlying software are owned by us and protected by intellectual property law. The financial data you enter is yours: using Strata doesn't transfer any ownership of your data to us, and we only use it to provide the service back to you.

Strata integrates with third-party services, including Plaid for connecting bank and brokerage accounts, and Google for optional sign-in. Your use of those integrations is also governed by that provider's own terms of service, which you should review separately. We are not responsible for the availability, accuracy, or conduct of third-party services.

Strata is a tool for tracking and organizing information you provide. It is not a financial advisor, broker, bank, or tax professional, and nothing in the app constitutes financial, investment, tax, or legal advice, including anything generated by the Financial Copilot feature. Projections shown in Strata (payoff dates, goal pace, safe-to-spend figures) are estimates based on the numbers you've entered and simple, stated assumptions. They are not guarantees of future results. You are solely responsible for your own financial decisions; make them with the help of a qualified professional where appropriate.

The service is provided "as is" and "as available," without warranties of any kind, express or implied, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the service will be uninterrupted, error-free, or that figures displayed will always be accurate or current, particularly data synced from a connected institution outside our control.

To the fullest extent permitted by law, Strata and its operators are not liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the service, including but not limited to financial decisions made based on information displayed in the app, even if advised of the possibility of such damages.

You agree to indemnify and hold Strata and its operators harmless from any claim, loss, or demand, including reasonable legal fees, arising from your use of the service, your violation of these terms, or your violation of any third party's rights.

You may stop using Strata and delete your account at any time. We may suspend or terminate accounts that violate these terms, pose a security risk, or engage in abusive behavior toward the service or other users. Where reasonably possible, we'll notify you before termination and give you an opportunity to export your data first.

We may update these terms from time to time. If we make material changes, we'll update the date at the top of this page; continuing to use Strata after a change takes effect means you accept the updated terms.

These terms are governed by the laws of the United States and the State of Washington, without regard to conflict-of-law principles.

Questions about these terms can be sent to legal@strata-finances.com.

We collect information in three ways: what you give us directly, what we generate to run the service, and what third parties you choose to connect (like Google sign-in or a bank account) share with us.

• Your email address and a securely hashed password, if you sign up with email and password.
• Your name, email address, and profile photo URL, if you sign in with Google. We never see or store your Google password.
• A TOTP secret and enrollment status, if you enable two-factor authentication. The secret is generated and stored by our authentication provider (Supabase Auth), not by our own servers.
• Session tokens, stored in httpOnly cookies that client-side JavaScript cannot read, used to keep you signed in.

Everything in the app, including account balances, transactions, recurring bills, debts and loan terms, savings goals, and investment holdings, is either data you entered yourself or data imported from an institution you explicitly connected. We use this data only to provide the service back to you: calculating balances, projections, and the figures shown on your dashboard. We do not sell this information, and we do not use it to serve you ads.

If you connect a bank or brokerage account, we use Plaid to retrieve account and transaction data on your behalf. Plaid handles the credentials you use to log in to your institution, entered directly into Plaid's own interface. We never see or store your bank username or password. The access token Plaid issues us for a connected account is encrypted at rest and used only to keep that account's balances and transactions in sync. Disconnecting an account revokes that access.

If you use the Financial Copilot feature, your message and a snapshot of your financial summary relevant to the question (figures like net worth, safe-to-spend, income, debt balances and rates, goal progress, and recurring bill names/amounts, not your full transaction history) are sent to Anthropic, the provider of the AI model that powers the Copilot, in order to generate a response. This data is used only to answer your question in that moment; Strata does not persist Copilot conversations on our servers, and the Copilot cannot take any action on your account. It is read-only and advisory.

We use a small number of strictly necessary cookies to keep you signed in and to remember which month you're browsing in the dashboard. We do not use third-party advertising or tracking cookies. Display preferences (theme, language, and whether balances are hidden on screen) are stored in your browser's local storage rather than sent to us, and never leave your device.

We use Google Analytics to understand aggregate usage patterns, which pages are visited and how often, so we can improve the product. Analytics data is not linked to the financial figures inside your account. You can opt out of Google Analytics tracking across the web using Google's browser add-on.

We rely on a small number of infrastructure providers to run Strata. Each processes data only as needed to provide their service to us, under their own privacy commitments:

• Supabase: database hosting and authentication. Holds your account data and financial records.
• Vercel: application hosting and delivery. Handles the web traffic between your browser and our servers.
• Plaid: if you connect a bank or brokerage account, retrieves account and transaction data from your institution on your behalf. See "Financial information" above.
• Google: provides optional OAuth sign-in. Receives only the standard OAuth handshake; we receive your name, email, and profile photo in return.
• hCaptcha: verifies you are not an automated script on the sign-up, sign-in, and password reset forms.
• Google Analytics: aggregate, anonymized usage analytics. See "Analytics" above.
• Anthropic: if you use the Financial Copilot, processes your question and a summary of your finances to generate a response. See "AI Copilot" above.

We retain your account and financial data for as long as your account is active. Deleting your account from Settings permanently removes your profile and financial records, including everything mirrored from a connected bank, except where we're required to retain limited records for legal or security purposes (for example, fraud-prevention logs).

Data is encrypted in transit (TLS) and at rest. Passwords are hashed, never stored in plain text. We support two-factor authentication, rate-limit sign-in attempts, and apply row-level security so your data is only ever readable by your own account. No system is perfectly secure, but we treat your financial data with the same care we'd want for our own.

You can, at any time, directly in the app:

• Export your data as a CSV file, or as one complete download, from Settings.
• Correct or update your information directly in the app.
• Delete your account and all associated data from Settings. This is immediate and does not require contacting us.
• Ask us what data we hold about you, by contacting us below.

Strata is operated from the United States, specifically California and Washington. If you are a California resident, the California Consumer Privacy Act gives you the right to know what personal information we hold about you, request its correction or deletion, and opt out of the sale or sharing of your personal information. Strata does not sell or share your personal information with third parties for their own marketing purposes; see "Third-party providers" above for the full list of providers we use to run the service. You can exercise your right to know, correct, or delete directly in Settings, or by contacting us below.

If you are accessing Strata from outside the United States, be aware that your information will be processed and stored in the United States.

Questions about this policy or your data can be sent to privacy@strata-finances.com.