1. Overview

Sanger ("sang3r.com", "we", "the Service") is a personal command center that helps you manage projects and finances in one place. This policy describes how we collect, use, and protect your information.

2. Information We Collect

Account Information: When you sign in via Clerk, we receive your name, email address, and authentication identifiers. We do not store passwords.

Financial Data: When you connect a bank account through Plaid, we receive account balances, transaction history, and account metadata (institution name, account type). We do not receive or store your bank login credentials — Plaid handles authentication directly.

Project Data: We sync public and private repository metadata (names, descriptions, commit history) from GitHub, Vercel, and Railway using API tokens you provide.

Usage Data: We store chat messages you send to the Sanger AI assistant to maintain conversation context.

3. How We Use Your Information

Your information is used exclusively to provide the Service to you:

• Display account balances, transactions, and financial insights
• Generate AI-powered spending analysis and budget suggestions
• Show project health, deploy status, and development activity
• Maintain your preferences and settings

We do not sell, rent, or share your personal or financial data with third parties for marketing or advertising purposes.

4. SMS and Messaging

Sang3r SMS Notifications is a feature that delivers project status updates, deploy alerts, and other operational notifications to your mobile phone via SMS.

What we collect: When you opt in to SMS notifications, we store your phone number and messaging preferences to deliver messages to you. We may also log message delivery status for troubleshooting purposes.

Consent: You must explicitly opt in to receive SMS messages. Consent is not a condition of using any other part of the Service. You may opt out at any time by replying STOP to any message or by updating your notification preferences in Settings.

No sharing: Your phone number and SMS opt-in consent are never sold, rented, or shared with third parties for marketing or promotional purposes. Phone numbers are used solely to deliver Sang3r notifications.

Message frequency: Message frequency varies based on your notification preferences and project activity. Standard message and data rates may apply.

5. Third-Party Services

We integrate with the following services, each with their own privacy policies:

• Clerk — Authentication and session management
• Plaid — Bank account linking and transaction sync. Plaid's privacy policy is available at plaid.com/legal
• Anthropic (Claude) — AI chat and financial analysis. Conversation data sent to Anthropic is not used to train models.
• Vercel — Hosting and deployment

6. Data Security

We take the following measures to protect your data:

• All connections use TLS 1.3 encryption in transit
• Plaid access tokens are encrypted at rest using AES-256-GCM before storage
• Authentication is required for all API endpoints that access user data
• Bank account numbers and credentials are never stored or transmitted to our servers
• API keys and secrets are stored as encrypted environment variables, never in source code

7. Data Retention and Deletion

Your data is retained for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. Upon deletion:

• All financial data (transactions, accounts, budgets) is permanently deleted
• Plaid access tokens are revoked and removed
• Chat history and project data are purged
• Authentication records are removed from Clerk

8. Your Rights

You have the right to:

• Access your personal data stored by the Service
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect linked bank accounts at any time through Plaid
• Export your data in a portable format

9. Contact

For questions about this policy or to exercise your data rights, contact us at jackson@sang3r.com.