Privacy Policy

• We collect only what we need to give you a software audit, an estimate, and a build.
• If you connect your bank, it is read-only — we can never move money, and we don't store your bank login.
• We never sell your data or share it with advertisers.
• You can ask us to export or delete your data at any time.
• When we build you an app, the data in it is yours.

Depending on how you use TailorMadeApps, this may include:

• Account & contact details — your name, email, phone number, and business name, so we can create your account, verify your email, and reach you about your project.
• Subscription Audit inputs — the tools and costs you enter, statement text you paste or upload, the features you tell us you use, and your priorities. We use these to size your savings and scope your app.
• Bank transaction data (only if you connect a bank) — through our provider Plaid, we receive a read-only list of your recent transactions so we can identify recurring software charges. We do not receive or store your online-banking username or password.
• Payment information — handled by our payment processor Stripe. We don't store your full card number.
• Usage & technical data — basic information such as your device and log data needed to run and secure the site.

• To run your Subscription Audit and show your potential savings.
• To scope, estimate, build, and support your custom app.
• To verify your email and protect against abuse of our tools.
• To communicate with you about your audit, quote, and project.
• To meet legal, accounting, and security obligations.

We do not use your information to build advertising profiles, and we do not sell it.

If you choose to connect a bank account, we use Plaid to do it securely. You enter your bank credentials directly with Plaid — never with us. Plaid provides us a read-only view of your transactions so we can detect recurring subscriptions. We cannot move money, make payments, or change anything in your account.

Our bank scan is a one-time, read-only read: we detect your subscriptions and then discard the access token, so there is no standing connection to your bank afterward. Plaid's handling of your data is described in the Plaid End User Privacy Policy.

To read a statement or analyze your tools' features, we send that text to our AI provider (Anthropic) purely to extract your subscriptions and features. This content is used only to produce your result — it is not used to train AI models.

We do not sell, rent, or trade your personal or business data, and we do not share it with advertisers — full stop. We share information only with the service providers below, only as needed to run TailorMadeApps.

We use a small set of trusted providers to operate the service:

• Supabase — secure database and account sign-in.
• Stripe — payment processing.
• Plaid — read-only bank connections (only if you use one).
• Anthropic — AI that reads statements and analyzes features.
• Email/SMS providers — to send verification codes and updates.

Each processes data on our behalf under its own security and privacy commitments. We may also disclose information if required by law.

Your business data is yours. You can ask us at any time to:

• Access or export a copy of the data we hold about you.
• Correct information that's wrong.
• Delete your data and close your account.

When we build and deliver an app you own, the data within it belongs to you. If you have an account, you can download or delete your data yourself from your account's data & privacy page. You can also email us at hello@tailormadeapps.com and we'll take care of it promptly.

We keep information only as long as needed for the purposes above — to run your audit, deliver and support your app, and meet legal or accounting requirements — and then delete or anonymize it.

Bank data has a short life. As noted, we discard the Plaid access token immediately after a scan, so there is no standing connection to your bank. The read-only transaction data from that scan is used to build your audit and is deleted or anonymized within 90 days, or sooner if you ask us to. After that we keep only the non-bank results you chose to save — the subscriptions and savings figures that make up your audit — not the underlying transactions.

We use encryption in transit, restricted access, and reputable infrastructure providers to protect your information. Sensitive keys are kept server-side and never exposed to your browser. No method of transmission or storage is perfectly secure, but we work hard to protect your data.

Cookies are small files a site stores on your device. We keep our use of them minimal:

• Strictly necessary — cookies that keep you signed in, keep your session secure, and remember essential choices. The site can't work properly without these, so they don't require consent.
• Analytics or marketing — we do not currently use advertising or cross-site tracking cookies. If we ever add optional analytics, we'll update this policy and, where the law requires it (for example in the EU/UK), ask for your consent first through a cookie banner.

You can block or delete cookies in your browser settings, though doing so may sign you out or limit parts of the site. Because we don't sell data or run cross-site advertising, we currently treat any “Global Privacy Control” browser signal as an opt-out of sale/sharing — which for us changes nothing, since we never sell or share data that way.

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights over your personal information:

• The right to know what personal information we collect and how we use it — described throughout this policy.
• The right to access or receive a copy of that information.
• The right to delete your information, subject to legal exceptions.
• The right to correct inaccurate information.
• The right to opt out of the sale or sharing of your personal information, and to limit use of sensitive information.
• The right not to be discriminated against for exercising these rights.

We do not sell or share your personal information as those terms are defined under California law, and we do not use sensitive information (such as bank data) for anything beyond providing the service you asked for. To exercise any right, use your account's data & privacy page or email hello@tailormadeapps.com. We will verify your request and respond within the timeframes the law allows, and you may use an authorized agent to make a request on your behalf.

If you are in the European Economic Area, the United Kingdom, or Switzerland, the GDPR (and UK GDPR) apply. Ellingwood Pro, LLC, d/b/a TailorMadeApps is the data controller for the personal data described here.

Our legal bases for processing are: performance of a contract (to run your audit, quote, and build), legitimate interests (to secure the site, prevent abuse, and communicate about your project), consent (where we ask for it, such as optional cookies or a bank connection — which you can withdraw at any time), and legal obligation (accounting and compliance).

You have the right to access, correct, delete, restrict, or object to our processing of your data, the right to data portability, and the right to withdraw consent. To exercise these, email hello@tailormadeapps.com. You also have the right to lodge a complaint with your local data protection authority, though we hope you'll contact us first so we can help.

International transfers. We operate from the United States and use service providers there, so your data may be processed in the U.S. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

TailorMadeApps is a business service and is not directed to children under 16. We do not knowingly collect their information.

We may update this policy as our service evolves. We'll change the effective date above and, for significant changes, provide additional notice.

Questions or requests about your privacy? Email hello@tailormadeapps.com. This service is provided by Ellingwood Pro, LLC, d/b/a TailorMadeApps and governed by the laws of West Virginia, United States.