The privacy promise

What we store

Your email address and preferred email language; the payment rows you confirm (payer name, amount, date, note and category); client names and notes; sales and recurring jobs; and your business profile.

If you attach a photo to a sale, it's kept as an image inside your account. If you turn on SMS or WhatsApp reminders, we store the phone number and a timestamp of your consent. If you joined the founding-hundred list on this site, we store that email separately, as described below.

Who processes it

Supabase runs our database and sends the sign-in emails, on servers in the United States. Vercel hosts the app and keeps short-lived request logs. If you sign in with Google, Google confirms who you are and gives us your name, email address and profile picture — nothing else — and Google knows you signed in.

OpenAI reads your screenshots to extract the payment rows. OpenAI may keep the images it receives for up to 30 days to monitor for abuse and does not train its models on them; contado itself does not store the images it sends.

Google's Workspace mail sends the sign-in emails, and Google Analytics runs on the public pages only — never inside the app — honoring Do Not Track. Twilio and Meta process your phone number only if you turn on SMS or WhatsApp reminders.

How long we keep it

We keep everything until you delete your account. Deletion has a 7-day cooling-off period during which you can change your mind, and then a nightly job permanently removes every row — including your sign-in record.

The founding-hundred email is kept separately and survives account deletion on purpose — we hold it until you ask us to remove it.

Your rights

Export everything from Settings whenever you like, and delete your account from Settings too. For an LGPD (Brazil) or CCPA (California) request — access, correction, deletion or portability — email [email protected].

We don't sell or share your personal information. If you're outside the United States, know that your data is processed here.

Your screenshots are sent to an AI service to be read

When you upload a screenshot or photograph, the image goes to OpenAI, which reads the text and returns the payments it found. That image usually contains your customers' names, what they paid and when. It leaves your device. We keep the rows you confirm — not the images.

Photos you attach to a sale are kept

The screenshots above are read and discarded. A photo you attach to a sale is different: it's stored with that sale until you delete your account — single photos can't be removed yet, so attach only what you're fine keeping.

Other people's information

Those screenshots are mostly other people's names and payments. Only upload what you're entitled to have.

Your data is yours

Export the lot as a spreadsheet whenever you like, free, always. We don't sell your data and there are no ads.

Deleting: your whole account yes, single entries not yet

A payment you log stays in your ledger — you can correct it, but not remove it one by one. You CAN delete your whole account in Settings: everything is erased for good 7 days after you ask, and you can change your mind inside those 7 days.