Privacy Policy

What we collect

When you create an account, we collect your name and email address through Clerk, our authentication provider. That is the only personal information you give us directly.

If you import a CSV file, we store that transaction data: merchant names, amounts, and dates. If you enter transactions manually, same deal. This is financial data and we treat it accordingly.

No bank login required

DonkeyBucks does not offer bank connections. There is no login flow to a bank anywhere in the current product, on Free or Pro. We never receive, see, or store a bank username or password, because there is no path for that data to reach us.

The ways data gets into DonkeyBucks are a CSV statement you choose to upload or a transaction you type in yourself.

A small number of accounts connected through SimpleFIN before August 2026 continue to sync read-only until their owner removes them. Those connections use a token the account owner created directly at SimpleFIN, and DonkeyBucks never sees bank credentials.

Automatic categorization

When you trigger automatic categorization, batches of your transaction data (merchant names, amounts, dates) are sent over TLS to a hosted categorization model. This only happens when you click the button. It does not run automatically in the background. When you import a CSV file and the column layout is unclear, the header row and a few sample rows may also be sent to the same provider for smart detection of which column is which.

The provider processes this data under its API terms of service and does not use API input data to train its models. We do not retain any processed results on the provider's infrastructure, just the categorization suggestions we store in your DonkeyBucks account.

What we never do

• Sell your data to anyone, full stop.
• Share your financial data with advertisers.
• Use your data to target you with financial products.
• Ask for or store a bank login of any kind.

Where your data lives

Your account and transaction data is stored in Convex Cloud, a serverless database platform. Data is encrypted in transit (TLS) and at rest. Authentication is handled by Clerk, which is SOC 2 Type II certified.

DonkeyBucks is hosted on Vercel. Your data does not leave the United States under normal operation.

Cookies

We use cookies and local storage for authentication sessions only. Clerk sets a session token so you stay logged in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. There is no cookie banner because there is nothing invasive to consent to.

Deleting your data

Email us at hello@donkeybucks.com and we will delete your account and all associated data within 30 days. That includes your profile, all connected accounts, all transactions, all rules and categories you created, everything. We do not hold on to anything after a deletion request.

Changes to this policy

If we make material changes, we will update the effective date at the top of this page and, if it is significant, notify you by email. Continuing to use DonkeyBucks after a change means you accept the updated terms.

Questions

Email hello@donkeybucks.com. A human reads it.