Privacy Policy
Version 2026-08-14 · Last updated [PLACEHOLDER: date]
1. Who we are
Wallet Tracker (“we”, “us”) is operated by [PLACEHOLDER: legal entity / individual name] (“Operator”). This policy explains what personal data we collect, why, and your rights under the Singapore Personal Data Protection Act 2012 (PDPA).
2. What we collect
- Account email — used to identify your account and send service emails.
- Forwarded bank/card alert emails — the transaction-alert messages you choose to forward to us.
- Uploaded statements — any bank/card statement files (CSV/PDF) you upload to import transactions.
- Derived transaction data — amounts, merchants, dates, and categories parsed from the above.
- Technical data — [PLACEHOLDER: e.g. log/diagnostic data, if any].
We only process the alert emails you actively forward and the files you actively upload. We never access, connect to, or read your email inbox.
3. How we use your data
To parse and display your spending, estimate rewards, and provide the service's features. We do not sell your personal data. [PLACEHOLDER: describe any analytics or notifications.]
4. Third-party processors
We rely on the following processors, who handle data on our behalf:
- Supabase — database, authentication, and storage. [PLACEHOLDER: hosting region].
- Vercel — application hosting.
- Resend — transactional email delivery (e.g. confirmation emails).
- [PLACEHOLDER: any other processors].
Anthropic is different, and only involved if you turn on the Claude connector described in section 5. It is not a processor acting on our behalf: it receives your investment data because you asked your own Claude for it, and handles it under your agreement with Anthropic.
5. Connecting Wallet Tracker to Claude
Connector terms version 2026-08-14
Wallet Tracker can be added to Claude (Anthropic's AI assistant) as a connector, so you can ask Claude questions about your own portfolio. This is off by default and entirely optional. You turn it on yourself in Settings → Connect to Claude by accepting this section and generating a connect token. If you never do that, nothing in this section applies to you and no data of yours reaches Anthropic through us.
What a connected Claude can read
Your own investment records, and nothing else: your portfolio summary and totals, your holdings, your brokerage accounts and their values, your investment transaction history, dividends received and forward dividend estimates, performance over time, and portfolio allocation and concentration.
The connection is read-only. It exposes no way to place a trade, buy or sell anything, move or withdraw money, edit a record, or write anything at all to your account. A connected Claude can answer questions about your data; it cannot change it or act on it.
Not included: your spending, cards, rewards, budgets, statements and bills are outside what this connector can read.
What is sent to Anthropic
When you ask your connected Claude something about your portfolio, Claude requests the relevant data from us and we return it to Anthropic, Inc., which processes it under Anthropic's own terms and privacy policy, and it appears in your Claude conversation. Anthropic's handling of that data — including any retention — is governed by your agreement with them, not by this policy.
This only happens when you use the connection. There is no background sync, no scheduled export, and no transfer initiated by us: nothing is sent unless a request arrives carrying your token.
What we remove before sending
Data leaving through the connector is assembled field by field from a fixed list, rather than copied out of our database. The following are stripped and never sent:
- Card and account numbers, including last-4 digits.
- Raw bank and card descriptors (which can carry terminal IDs and locations).
- Internal record identifiers.
- Personal notes you have typed on a transaction.
- Email addresses, including other people's.
The Splitfeature is excluded entirely — a Split group holds other people's expenses, names and contact details, and those people have not agreed to an AI connector. No connector permission exists that can reach it.
Your token, and revoking it
The connection is authenticated by a read-only connect token that we generate for you. We store only a one-way hash of it, so the token itself is shown to you once and cannot be retrieved afterwards — and anyone who holds a copy of it has this read access until it is revoked. Tokens expire 90 days after they are created.
You can revoke a connection at any timein Settings → Connect to Claude. Revocation takes effect on the connector's next request. It does not remove anything already sent from your Claude conversation history, which lives in your Anthropic account and is yours to delete there.
Your consent
We record the date and the version of this section that you accepted, before any token is issued, and we will not issue one without it. If this section changes materially we publish a new version and ask you to accept it again before you can create a further connection; connections you already created keep working until they expire or you revoke them.
6. Security
Each row of your data is protected by database row-level security (RLS), so your account can only ever read its own records. [PLACEHOLDER: encryption in transit/at rest, access controls, breach process.]
7. Retention
We keep your data for as long as your account is active, and delete it [PLACEHOLDER: retention period] after account closure, except where law requires longer.
8. Your rights
Under the PDPA you may request to access, correct, or delete your personal data, and withdraw consent at any time. To exercise these, contact our Data Protection Officer below. You can also delete your account in-app [PLACEHOLDER: confirm in-app deletion path].
9. Contact / DPO
Data Protection Officer: [PLACEHOLDER: name] · [PLACEHOLDER: contact email] · [PLACEHOLDER: mailing address].