Trust Center

Last updated June 15, 2026

This is draft boilerplate provided for convenience and is pending review by legal counsel. It does not constitute legal advice.

We know the data in FinanceTracker — your accounts, transactions, and budgets — is sensitive. This page summarizes how we keep it safe and the service reliable.

Data protection

Passwords are hashed with bcrypt, and all traffic is encrypted in transit (TLS). Your financial data is scoped to your account and never used for advertising or sold.

Infrastructure

FinanceTracker runs on Vercel with a Neon Postgres database. Payments are handled by Stripe, a PCI-DSS Level 1 provider, so we never store full card details on our systems.

Monitoring and reliability

We use Sentry for error monitoring and performance insights, so we can detect and fix issues quickly. Access to production systems is limited to what is necessary.

Abuse prevention

Sign-in and registration are rate-limited to defend against brute-force and credential-stuffing attacks.

Reporting a vulnerability

If you believe you've found a security issue, please email security@224tech.com. We acknowledge reports promptly and will not pursue good-faith researchers who follow responsible disclosure.

Questions about this page? Contact us at security@224tech.com.