Our commitment to privacy
CASE Budget is designed to help individuals, households, businesses, and organizations manage sensitive financial information. XilAire Technologies is committed to handling that information responsibly and using it only for legitimate platform, security, support, and legal purposes.
Information we collect
We collect information that you provide directly when you create, configure, or use a CASE Budget account.
Account and profile information
- First name, last name, display name, and email address.
- Phone number, profile image, timezone, locale, and account preferences.
- Authentication information, password-reset activity, multi-factor authentication settings, and security events.
- Account status, onboarding progress, and recent sign-in information.
Workspace and membership information
- Workspace names, descriptions, logos, types, and identifiers.
- Household, business, or organization membership information.
- Workspace roles, permissions, invitations, and membership status.
- Information about users who invite, suspend, remove, or manage workspace members.
Financial planning information
- Income sources and expected income.
- Budget groups, budget items, assigned amounts, and spending activity.
- Transactions, merchants, notes, dates, categories, and account references.
- Bills, payment schedules, reminder preferences, payment status, and recurring details.
- Savings goals, debt balances, payoff plans, assets, liabilities, investments, and net-worth records.
- Financial reports, projections, preferences, and planning notes.
Support and communication information
- Messages, screenshots, attachments, and details submitted through customer support.
- Feedback, survey responses, feature requests, and issue reports.
- Email delivery status and communication preferences.
Technical and usage information
- Browser type, operating system, device type, and application version.
- IP address, approximate region, session identifiers, and request timestamps.
- Pages viewed, actions performed, feature usage, and application navigation.
- Performance metrics, error reports, diagnostics, and security logs.
How we use information
We use information collected through CASE Budget to operate, protect, support, and improve the platform.
- Create, authenticate, maintain, and secure user accounts.
- Provision personal, household, business, and organization workspaces.
- Provide budgeting, transaction, bill, savings, debt, reporting, investment, and net-worth features.
- Synchronize activity across authorized users and shared workspaces.
- Apply subscription plans, usage limits, workspace limits, and feature availability.
- Process account confirmations, password resets, security alerts, and transactional messages.
- Provide customer support and investigate reported issues.
- Detect unauthorized access, fraud, abuse, platform attacks, and suspicious activity.
- Monitor reliability, diagnose errors, and improve application performance.
- Develop, test, and enhance new features and services.
- Comply with legal, regulatory, accounting, tax, security, and contractual obligations.
Financial and connected-account information
CASE Budget may allow you to enter financial information manually or connect supported financial institutions through an approved third-party data provider.
Manual financial records
Information that you enter manually may be stored in your CASE Budget workspace so the application can calculate budgets, balances, spending, reports, goals, debt progress, and net worth.
Connected financial institutions
When bank connectivity is available, CASE Budget should not request or store your financial institution password directly. Authentication credentials are handled by the approved connection provider according to that provider's security and privacy practices.
- Account names, account types, balances, and masked account identifiers.
- Transaction descriptions, dates, amounts, merchants, and categories.
- Institution names and connection status.
- Connection errors, synchronization timestamps, and consent status.
CASE Budget is not a bank
CASE Budget is a financial planning and organization platform. It does not hold customer deposits, issue bank accounts, or independently execute bank transactions unless a future feature explicitly states otherwise.
Shared workspaces and collaboration
CASE Budget may allow you to share a household, business, or organization workspace with other users.
- Workspace owners and administrators may be able to view or manage information stored in the workspace.
- Members may be able to create, edit, or view financial information depending on their assigned role.
- Viewers may have read-only access to eligible information.
- Workspace owners may invite, suspend, remove, or change permissions for other members.
- Information entered into a shared workspace may remain visible to other authorized members even if your personal membership later ends.
You should only place information in a shared workspace when you are authorized to share it with all users who have access to that workspace.
Service providers
XilAire Technologies may use service providers to operate and support CASE Budget. These providers may process information only as reasonably necessary to perform contracted services.
- Cloud infrastructure and database hosting.
- Authentication, session management, and account-security services.
- Email delivery and transactional communication services.
- Payment processing and subscription-management services.
- Financial account connectivity and transaction-data providers.
- Error monitoring, logging, analytics, and performance tools.
- Customer-support, help desk, and communication platforms.
- Fraud prevention, security monitoring, and incident-response services.
Service providers are expected to protect information and use it only for authorized purposes, subject to their agreements with XilAire Technologies and applicable law.
How information may be shared
We do not sell your personal information. Information may be shared only when reasonably necessary for platform operation, user-requested collaboration, security, legal compliance, or business continuity.
- With service providers acting on behalf of XilAire Technologies.
- With workspace members when you intentionally join or share a workspace.
- With authorized XilAire Technologies support personnel when necessary to resolve a support, security, billing, or platform issue.
- With professional advisers such as attorneys, auditors, accountants, or insurers when reasonably necessary.
- When required by law, subpoena, court order, regulatory request, or other valid legal process.
- When necessary to protect users, XilAire Technologies, the public, or the integrity of CASE Budget.
- As part of a merger, acquisition, financing, reorganization, sale, or transfer of all or part of the business, subject to appropriate safeguards.
Security
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, loss, misuse, or disclosure.
- Encrypted network communications.
- Supabase authentication and secure session handling.
- Optional multi-factor authentication.
- Role-based platform and workspace permissions.
- Database Row Level Security policies.
- Server-only administrative credentials and service-role isolation.
- Access logging, security monitoring, and incident investigation.
- Restricted customer-support and administrative access.
- Account recovery controls and time-limited password-reset sessions.
- Backups and operational continuity controls.
Your security responsibilities
You are responsible for using a strong password, protecting your devices, securing your email account, enabling multi-factor authentication when available, and promptly reporting suspected unauthorized access.
No information system can guarantee absolute security. We cannot promise that unauthorized access, data loss, or other security incidents will never occur.
Data retention
We retain information for as long as reasonably necessary to provide CASE Budget, maintain security and audit records, satisfy legal obligations, resolve disputes, and enforce agreements.
- Active account and workspace information may be retained while the account or workspace remains in use.
- Financial records may be retained until deleted by an authorized user or removed through an account-deletion process.
- Subscription, payment, tax, and accounting records may be retained for legally required periods.
- Security logs, audit records, and fraud-prevention data may be retained after account closure.
- Backup copies may remain temporarily after information is removed from active systems.
- Information subject to a legal hold, investigation, dispute, or regulatory requirement may be retained longer.
Your rights and choices
Depending on your location and applicable law, you may have certain rights regarding your personal information.
- Access certain personal information associated with your account.
- Correct inaccurate or incomplete profile information.
- Request deletion of eligible personal information.
- Request a portable copy of eligible account or financial data.
- Object to or restrict certain processing.
- Withdraw consent where processing relies on consent.
- Manage account, communication, and security preferences.
- Disconnect supported financial institutions.
- Leave shared workspaces when your role permits.
- Close your CASE Budget account.
We may need to verify your identity before completing a request. Some information may not be deleted when retention is required for security, billing, legal, fraud-prevention, audit, or legitimate business purposes.
Children's privacy
CASE Budget is not intended for children under 13, and we do not knowingly collect personal information directly from children under 13.
A parent or legal guardian who believes that a child provided personal information should contact us. We will take reasonable steps to investigate and remove eligible information.
Changes to this Privacy Policy
We may update this Privacy Policy as CASE Budget changes or as legal, technical, operational, and security requirements evolve.
The revised policy will display a new last-updated date. We may also provide additional notice for material changes through CASE Budget, email, or another appropriate method.
Contact us
Questions, privacy requests, or concerns regarding this Privacy Policy may be directed to XilAire Technologies.