Cashlucent

Privacy Policy

Effective July 18, 2026

This Privacy Policy explains what information Cashlucent collects, how we use it, who we share it with, and the choices you have. It applies to your use of the Cashlucent service.

1. Who we are

Cashlucent is operated by Phan Ventures LLC. For any privacy questions, contact us at support@cashlucent.com.

2. Information we collect

  • Account information: your name, email address, and a securely hashed password. If you enable two-factor authentication, we store the associated secret and recovery codes.
  • Business & financial data: the information you enter to keep your books: businesses, chart of accounts, transactions, invoices, expenses, customers, vendors, items, bank imports, tax settings, and reports.
  • Bank connection data: if you choose to connect a bank account, data we receive through our bank aggregation provider, Plaid: linked account details (institution, account name, type, and masked account number) and transaction data (dates, amounts, and descriptions). See “Bank connections (Plaid)” below.
  • Usage & technical data: basic log data such as IP address, browser type, and timestamps, generated automatically when you use the service, used to operate and secure it.

We do not intentionally collect sensitive personal information beyond what’s needed to run your books, and we ask that you not store payment card numbers or government ID numbers in free-text fields.

3. How we use your information

  • To provide, maintain, and improve the service and its features.
  • To authenticate you, keep your account secure, and enforce our Terms.
  • To send transactional email: account verification, password resets, invitations, and documents you choose to send.
  • To respond to support requests and communicate about the service.
  • To comply with legal obligations.

4. Cookies

We use a small number of strictly functional cookies, to keep you signed in and to remember which business is active. We do not use advertising or third-party tracking cookies.

5. Service providers we share with

We don’t sell your data or share it for advertising. We rely on a few trusted providers to run the service, and share only what’s necessary for them to perform their function:

  • Vercel: application hosting and delivery.
  • Neon: managed PostgreSQL database where your data is stored.
  • Resend: sending transactional email on our behalf.
  • Plaid: connecting your bank accounts, if you choose to use bank connections (see the next section).

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer (such as a merger or acquisition), in which case we’ll notify you.

6. Bank connections (Plaid)

Bank connections are optional. If you connect a bank account, we use Plaid to link it. You authenticate directly with your bank through Plaid. Cashlucent never sees or stores your bank username or password. Through Plaid we receive linked account details and transaction history, which we use only to import transactions into your books or budget. Connections are read-only: Cashlucent cannot move money or make changes at your bank.

The credentials Plaid issues us for your connection (access tokens) are stored encrypted with a key held outside our database. When you remove a bank connection, or delete the business or account it belongs to, we invalidate those credentials with Plaid and delete them from our systems. By using bank connections you also grant Plaid the right to process your data as described in the Plaid End User Privacy Policy.

7. Data security

We protect your data with industry-standard measures: encryption in transit (HTTPS), password hashing, session controls including “sign out everywhere,” optional two-factor authentication, and strict per-business data isolation so one business’s data is never exposed to another. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to any incident.

8. Data retention

We keep your data for as long as your account is active. Financial records are often kept for several years for tax and audit reasons, so deletions within the app are “soft” by design: they remain in your books’ audit trail. If you close your account, we’ll delete or anonymize your data within a reasonable period, except where we’re required to retain it by law.

9. Your rights & choices

  • Access and export your data at any time using the built-in CSV and PDF exports.
  • Correct your account information in Settings.
  • Request deletion of your account and associated data by contacting us.
  • Depending on where you live, you may have additional rights (such as under GDPR or CCPA) to access, correct, delete, or restrict processing of your personal data. Email us to exercise them.

10. Children

Cashlucent is intended for business use by adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from children.

11. International users

Cashlucent is operated from the United States, and your data is processed and stored there. If you access the service from outside the U.S., you consent to that transfer and processing.

12. Changes to this policy

We may update this Privacy Policy from time to time. We’ll revise the effective date above and, for material changes, provide additional notice where appropriate.

13. Contact

Questions or requests about your privacy? Email support@cashlucent.com.