Privacy Policy

Inctra (“we”, “us”) is a personal-finance tracker at inctra.co.nz, operated from New Zealand. A finance app holds some of the most private information there is, so this policy tries to be specific about what we actually collect and what actually happens to it. It reflects our obligations under the New Zealand Privacy Act 2020.

What we collect

Information you give us

• Account details — your email address, name, and sign-in credentials, held by Clerk, our authentication provider. If you sign in with Google, we receive your name and email from Google.
• Your financial data — everything you enter or import to use the service: weekly income and expenses, transactions, assets, loans and credit cards, net-worth entries and milestones, targets, goals and habits, and the bank statements or screenshots you upload for import.

Billing information

Payments are handled by Stripe. Your card details go directly to Stripe — we never see or store your full card number. We store only the identifiers Stripe gives us (a customer and subscription reference) and your subscription status.

Collected automatically

Standard technical data that any web service generates: IP address, browser and device type, pages requested, and error logs, held briefly by our hosting provider for security and debugging. We don't run third-party advertising or tracking scripts.

AI processing of your statements

When you upload a bank statement or screenshot, its contents are sent to Anthropic, a third-party AI provider, to extract and categorise the transactions. The “Ask AI” feature likewise sends a summary of your financial data to Anthropic to answer your questions. This processing happens solely to provide those features.

Under Anthropic's commercial API terms, data sent through the API is not used to train their models by default, and we have not opted in to any data sharing that would change that. We don't keep your uploaded statement file after it has been processed — only the transactions you choose to save are stored.

How we use your information

Solely to provide Inctra: storing your entries, doing the calculations behind your dashboards and charts, running imports and AI answers, handling your subscription, and helping you when you contact support.

We never sell your personal information — to anyone, for any reason. We don't use your data for advertising, and we don't share it with anyone except the service providers below, who process it only so the app can function.

Who processes your data

• Clerk — authentication and account management (US-based).
• Stripe — subscription payments (US-based).
• Neon — our database, hosted on AWS in Sydney, Australia. This is where your financial data lives.
• Vercel — application hosting; our servers also run in the Sydney region (Vercel is a US company).
• Anthropic — AI processing of uploaded statements and Ask AI questions (US-based).

Because some providers are outside New Zealand, your information crosses borders. We only use established providers that commit contractually to protect the data they process, in line with the Privacy Act's rules on overseas disclosure.

Security

Your data is encrypted in transit (HTTPS everywhere) and encrypted at rest by our database provider. Every request to your data is authenticated and scoped to your account. No system is perfectly secure, but a breach of your trust here would be a breach of the whole point of the product, and we treat it that way.

Retention and deletion

• While your account is open we keep your data so the service works — long-run history is the product.
• Deleting individual records (a week, an asset, a loan, a goal) removes them from our production database immediately.
• Closing your account. Follow the steps on the delete account page or email us. We delete your account and all financial data from our production systems within 30 days of your request. Short-lived database backups expire on their own schedule shortly after.
• What we keep after deletion: only the minimal billing records that tax law and our payment processor require — never your financial tracking data.

Your rights

Under the Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, and ask us to correct it. Email support@inctra.co.nz from your account email and we'll respond within 20 working days. Most of your data you can also see, edit, and export directly in the app.

If you're not happy with how we handle a privacy request, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).

Children

Inctra is for people 16 and over. We don't knowingly collect information from anyone younger; if you believe a child has an account, email us and we'll remove it.

Changes to this policy

If we change this policy in a way that matters — new data collected, a new processor, a new use — we'll notify you by email or in the app before the change takes effect. The “last updated” date at the top always reflects the current version. Questions: support@inctra.co.nz.