Privacy Policy

Effective Date: September 13, 2026

Last Updated: September 13, 2026

This Privacy Policy describes how Porfolio LLC (doing business as “Face Your Budget”, “FYB”, “we,” “us,” or “our”) collects, uses, protects, and handles your personal and financial information when you use the Face Your Budget web application, services, and associated websites (collectively, the “Service”).

At Face Your Budget, we believe your personal cash flow, debts, and household numbers are strictly your business. We operate on a fundamental principle of data minimization, transparent data ownership, and strict zero-monetization of user data.

Privacy at a Glance (The Short Version)

• We Sell Software, Never Your Data: Our business model is supported entirely by software passes and optional human consultation services. We never sell, rent, monetize, or trade your data.
• No AI Model Training: We never feed, license, or expose your personal or financial records to artificial intelligence (AI) models, Large Language Models (LLMs), or machine learning training datasets.
• No Bank Credential Harvesting: We never ask for, collect, or store your online banking usernames or passwords. You maintain control by importing standardized CSV files.
• Mandatory Edge Bot Defense: Passing Cloudflare Turnstile is mandatory to authenticate and log in, ensuring only verified human users access the Service.
• No In-App Tracking or Ad Networks: We do not embed ad pixels, behavioral tracking cookies, or session-recording scripts within the authenticated web application.
• Permanent Cascade Deletion: You can permanently purge your financial data at any time directly in the app. Deleting a custom account destroys all associated transactions, goals, debts, and category allocations forever.

1. Our Core Privacy Commitments

• No Data Selling: We do not sell, rent, monetize, or trade your personal or financial data to data brokers, advertisers, marketers, or any third parties under any circumstances.
• No AI or Machine Learning Training: Face Your Budget does not use, feed, transfer, or license your transaction records, account names, debt balances, budgets, or personal information to train artificial intelligence (AI) systems, Large Language Models (LLMs), or commercial machine learning algorithms.
• No Bank Credential Harvesting: Face Your Budget does not use third-party screen-scrapers or aggregator feeds (such as Plaid, MX, or Yodlee) that require you to hand over your bank login credentials. You maintain absolute control over what financial data you import via our standardized CSV process.
• Encrypted Edge Storage: All financial records are stored securely in Cloudflare D1 databases using enterprise-grade encryption at rest and in transit.
• Permanent, Irreversible Data Deletion: You have the power to instantly and permanently cascade-delete your financial records directly from within the application.

2. Information We Collect

We collect only the minimum necessary information required to operate, secure, and deliver the Service.

A. Account & Authentication Information

When you register for an account and authenticate through our proprietary authentication engine, Mindful Auth, we collect:

• Account Credentials: Your email address and encrypted authentication credentials.
• Multi-Factor Authentication (MFA) Secrets: Encrypted password salts, cryptographic hashes, and temporary authentication codes stored securely in Cloudflare D1 to verify your identity during login.
• Member Identifier: A unique internal system identifier (member_id) assigned to your profile to enforce multi-tenant database isolation.

B. Financial & Budgetary Data

To provide budgeting and cash-flow projection services, you input or upload financial information, including:

• Custom Account Names: User-defined labels for your bank, credit card, or savings accounts (e.g., “Primary Checking”, “Savings”).
• Transaction Records: Dates, merchants, amounts, categories, and payment types imported via CSV or logged manually.
• Budget Metrics: Expense allocations, debt pay-down balances, interest rates, and savings goal targets.

C. Google Sheets Template & CSV File Imports

• Face Your Budget provides a free, optional Google Sheets template designed to assist users in formatting raw banking statements into FYB-compatible CSV files.
• Third-Party Platform Independence: The Google Sheets template operates entirely within your personal Google account under Google’s terms of service and privacy policies. Face Your Budget does not manage, inspect, or maintain access to your personal Google Drive or Google Sheets files.
• User Responsibility: You are exclusively responsible for safeguarding access to your Google account and your copy of the sheet template. Face Your Budget is not liable for data disclosures caused by user misconfiguration (such as enabling public file sharing links or improper permission settings on Google Workspace).

D. Billing Information

• Payments for software passes (such as the Lifetime Pass) and optional 1-on-1 consultations are handled directly by our payment processor, Stripe.
• Face Your Budget never collects, processes, or stores your credit card numbers, CVVs, or full payment card credentials on our servers. All cardholder data is tokenized and processed securely by Stripe in accordance with PCI-DSS compliance standards.

E. Security, Telemetry & Technical Metadata

To safeguard your account and operate our defense systems, our servers automatically process:

• Mandatory Bot Defense Telemetry (Cloudflare Turnstile): To prevent credential stuffing, automated brute-force attacks, and rogue scrapers, passing a Cloudflare Turnstile challenge is mandatory. Users cannot authenticate or access their accounts without successfully verifying human presence via Turnstile. Turnstile evaluates non-invasive browser telemetry at the edge without harvesting personal identity profiles or setting persistent tracking cookies.
• Audit & Session Logs: IP addresses, browser/device types, timestamps, and geographic location metadata derived via MaxMind (city, region, and country level) to detect unauthorized logins or impossible travel anomalies.
• Session States: Secure, short-lived, HTTP-only session tokens stored temporarily in Cloudflare KV (automatically expiring after one hour of inactivity) to maintain your authenticated status and reduce exposure to session hijacking.

F. Consultation & Historical CSV Data Prep (Optional Add-On)

• For users who purchase optional 1-on-1 budgeting onboarding sessions or our Historical Bank CSV Data Prep add-on, you may voluntarily provide past banking CSV files or cash-flow statements for manual cleaning, categorization, and setup assistance.
• Confidentiality & Access: These files are handled strictly on a confidential basis by the founder and authorized Face Your Budget specialists solely for the purpose of completing your requested service.
• Purge Timeline: All raw CSV files, temporary spreadsheets, and client-provided working documents used during coaching or data-prep engagements are permanently deleted from local devices and secure working storage within thirty (30) days of service completion.

3. How We Use Your Information

We use the data we collect solely for the following explicit purposes:

1. Core Service Delivery: Calculating your cash-flow projections, categorizing spending, tracking debt payoffs, and displaying your budget dashboard.
2. Security & Account Protection: Enforcing multi-factor authentication, verifying logins, requiring bot challenge verification via Cloudflare Turnstile, logging security events via Mindful Auth defense mechanisms, and blocking malicious attacks.
3. Transaction & Billing Processing: Verifying your license tier and processing one-time service transactions via Stripe.
4. Transactional & Operational Communications: Delivering essential system emails via Postmark, including account confirmation links, two-factor authentication codes, security notices, and Stripe billing receipts.
5. Customer Support & Service Inquiries: Receiving, tracking, and resolving customer support messages or manual account-locking requests through our support workspace (powered by Tape App and Postmark).
6. Product Updates & Newsletters (Optional): Sending periodic service announcements, release notes, or budgeting insights via email. You can opt out or unsubscribe from non-essential promotional or educational communications at any time by clicking the unsubscribe link included in every newsletter or emailing support.

4. Data Architecture & Internal Access Safeguards

We implement strict architectural safeguards to protect your personal and financial information:

• Edge Compute & Database Isolation: Face Your Budget is hosted on Cloudflare Workers and Cloudflare D1. Database queries enforce strict tenant isolation using parameterized SQL bindings to eliminate cross-account exposure and SQL injection vulnerabilities.
• Encryption Standards: All data in transit is protected using modern TLS 1.3 encryption. All data at rest within Cloudflare D1 and Cloudflare KV is encrypted using industry-standard AES-256 encryption.
• Mindful Auth Defense: Account authentication is managed by Mindful Auth, our proprietary multi-tier defense framework featuring zero persistent custody of sensitive session tokens, encrypted MFA records in D1, brute-force mitigation, Turnstile verification, and geolocation-based anomaly detection powered by MaxMind.
• Internal Administrative Access Transparency: Routine customer support workflows do not involve reviewing user financial records. However, because Face Your Budget operates on serverless infrastructure, the founder/lead developer and select authorized Face Your Budget administrative personnel possess super-administrator access to the underlying Cloudflare account and D1 database instances. This access is maintained strictly for infrastructure provisioning, disaster recovery, security auditing, and software maintenance, and is protected by hardware security keys and multi-factor authentication.
• User Responsibility & Account Locking: You are responsible for maintaining the confidentiality of your passwords and authentication credentials. If you suspect your account has been accessed without authorization, contact us immediately at security@faceyourbudget.com. FYB support administrators possess the administrative capability to manually lock your account to prevent further unauthorized access while you secure your credentials.

5. Data Deletion, Retention & Irreversible Purging

You maintain complete ownership of your financial data. We provide self-service controls to purge your data on demand:

A. Cascade-Deletion of Financial Data

• When you delete a custom bank account in Face Your Budget, our system executes an automated, irreversible cascade-deletion across our Cloudflare D1 database.
• What is purged: Deleting an account permanently destroys the account record and all associated transaction entries, debt schedules, savings goals, and category expense records linked to that account.
• Permanence: This deletion is immediate, permanent, and irrevocable on all active production databases. We do not retain hidden archival copies or recovery mirrors of cascade-deleted financial records. Once deleted, this data cannot be recovered by you or by our engineering support team.
• Account Continuity: Your underlying Face Your Budget member profile and login credentials (member_id) remain active so you can continue using the software, set up new accounts, or maintain your billing history.

B. Ephemeral Caches & Backup Retention

Live database records are deleted immediately upon your cascade-deletion command. Residual encrypted system snapshots, edge key-value session caches (Cloudflare KV), or operational telemetry logs automatically overwrite and purge within thirty (30) days.

C. Complete Account Closure

If you wish to terminate your Face Your Budget membership entirely and delete your login profile, you may submit a formal closure request to security@faceyourbudget.com. Upon verification, we will purge your profile, authentication credentials, and any remaining financial data, subject only to our statutory obligation to retain limited billing records (e.g., Stripe invoices) for federal and state tax compliance.

6. Third-Party Service Providers (Subprocessors)

We do not share your data with advertisers, third-party analytics trackers, or data brokers. We share the minimum necessary information only with the following essential infrastructure subprocessors:

• Cloudflare, Inc.: Provides serverless compute (Cloudflare Workers), edge database storage (Cloudflare D1), session cache (Cloudflare KV), and automated bot defense (Cloudflare Turnstile). Cloudflare processes encrypted application data, session tokens, and connecting network metadata to operate and secure the platform. Passing Cloudflare Turnstile is mandatory for login and authentication.
• Stripe, Inc.: Manages billing transactions, payment processing, and sales tax compliance. Stripe collects and processes customer email addresses, billing details, and tokenized payment instruments. FYB never receives or stores raw payment card numbers.
• Postmark: Powers our email delivery and inbound/outbound communications via the Postmark API. Postmark processes email addresses and message content for delivering transactional alerts (e.g., 2FA codes, password resets, receipts), managing direct customer support communications, and distributing optional product update newsletters.
• Tape App (Tape Technologies): Provides our secure internal operations workspace and CRM platform used by authorized Face Your Budget personnel to organize customer support tickets, manage inbound support correspondence, and track communications.
• MaxMind, Inc.: Provides IP-to-location mapping services. MaxMind processes connecting IP addresses to resolve city, region, and country-level metadata for security audit logging and impossible travel anomaly detection.

Professional Directory Inquiries

Face Your Budget features an optional directory of vetted Financial Advisors and CPAs. We do not automatically share, transfer, or sync your financial or personal information with any partner professionals. Any engagement with a professional listed in the FYB directory is strictly voluntary and initiated entirely by you outside the FYB software application.

7. Cookies and Browser Storage

We maintain a strict separation between data handling practices on our public marketing website and within our authenticated application:

• Web Application (Zero Tracking & No Local Storage):
  • No Browser Local Storage: The Face Your Budget web application does not use browser localStorage or sessionStorage to store session tokens, financial records, or personal data.
  • Strictly Necessary Session Cookie Only: Authenticated access is maintained solely by issuing a single, secure, HTTP-only session_id cookie directly to your browser. This cookie is configured with strict security flags (Secure, HttpOnly, and SameSite) along with an explicit Expires / Max-Age attribute set to expire automatically after one hour of inactivity.
  • No Third-Party Trackers or Ad Cookies: We do not use marketing, retargeting, behavioral analytics, or third-party tracking cookies within the web application. Your budget figures and in-app activity are never tracked by third-party advertisers.
• Public Marketing Website (faceyourbudget.com):
  • Analytics & Performance Cookies: On our public-facing marketing website, we may use third-party analytics or tracking cookies and pixels to assess page traffic, understand campaign effectiveness, and improve our web content.
  • User Choice: Visitors can control or block these marketing cookies at any time via their web browser settings.
  • Global Privacy Control (GPC) & Do Not Track (DNT): Our public marketing website respects browser-based Global Privacy Control (GPC) signals and Do Not Track (DNT) headers. Where a supported browser sends a GPC signal, our marketing site automatically disables non-essential tracking and analytics scripts.

8. Children’s Privacy

Face Your Budget is intended solely for adults managing personal or household finances. We do not knowingly collect or solicit personal information from children under the age of 18 (or the age of majority in your jurisdiction). If we learn that we have inadvertently collected personal data from a minor, we will promptly delete that data.

9. Regional Privacy Rights (CCPA / CPRA / FIPA / State Disclosures)

Regardless of your geographic location, Face Your Budget respects your fundamental right to data ownership and privacy under state and federal frameworks (including the California Consumer Privacy Act, Florida Information Protection Act, and applicable U.S. consumer data privacy statutes):

• Right to Know and Access: You have the right to know the categories and specific pieces of personal information we have collected about you. You may inspect your active financial records directly within your account dashboard at any time or request a summary by contacting our privacy team.
• Right to Deletion: You have the absolute right to purge your financial data through self-service cascade-deletion, or request total account deletion by emailing security@faceyourbudget.com.
• No Automated Export Button: The web application does not currently feature an automated one-click CSV export utility. Users wishing to obtain a manual summary of their account record may submit a request to security@faceyourbudget.com.
• Zero Sale or Sharing of Personal Data: Porfolio LLC does not sell, rent, release, disclose, disseminate, make available, or transfer personal or financial information to third parties for monetary or other valuable consideration, and has not done so in the preceding 12 months.
• No AI Model Training: We explicitly guarantee that your personal data, transactions, and budgets are never sold, licensed, or utilized to train machine learning models or artificial intelligence datasets.
• Opt-Out Rights for Marketing Communications: You may opt out of receiving promotional newsletters or product updates at any time by utilizing the unsubscribe mechanism provided in every email message or contacting support. Essential transactional and security messages cannot be opted out of while maintaining an active account.
• Global Privacy Control (GPC): We honor GPC signals transmitted by your browser on our marketing website as a valid request to opt out of third-party tracking.
• Right to Non-Discrimination: We will never deny services, charge different pricing tiers, or degrade your service quality for exercising any of your privacy rights.

10. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect infrastructure updates, legal obligations, or service improvements. When changes occur, we will update the “Last Updated” date at the top of this policy and notify active users via an in-app notice or email notification prior to material changes taking effect.

11. Business Information & Contact

Face Your Budget is owned and operated by Porfolio LLC, a Florida limited liability company.

If you have questions, concerns, or requests regarding this Privacy Policy or our security practices, please contact our privacy and legal team at:

Porfolio LLC (d/b/a Face Your Budget)

Email: security@faceyourbudget.com

Mailing Address:

3500 Posner Blvd #1507

Davenport, FL 33837

United States