1. Who We Are

Tallyroot is operated by Németh Máté ev. (sole proprietor, Hungary). For any privacy-related questions, contact us at [email protected].

2. Data We Collect

We collect only the data necessary to provide the service:

Account data — email address, display name, and hashed password.
Financial data — transactions, account balances, budget allocations, and categories you create or sync into Tallyroot. This data is stored in our database and is never shared with third parties.
Investment data — holdings, trades, positions, cash balances, dividends, and realized gains, whether you enter them by hand, upload a broker statement, or sync them from a connected broker.
Broker credentials — if you connect Interactive Brokers, we store the Flex Web Service token and query id you provide. Both are encrypted before they are written to our database and are never stored in plain text. We never ask for, and cannot access, your IBKR username or password.
Receipt images — photos you upload for receipt parsing. Images are stored on Cloudflare R2 (EU region) and processed by Anthropic's Claude AI for text extraction. Images are deleted when you delete the receipt.
Usage data — on the landing site (tallyroot.com) we use Google Analytics to understand traffic, but only if you accept it in the banner. Until then no analytics script runs and no analytics cookie is set. Your answer is kept in your browser's local storage, and you can change it at any time with "Cookie settings" at the bottom of every page. The app (app.tallyroot.com) uses no analytics. Fonts on both sites are served from our own domain, not from Google.
Sign-up source: when you create an account or start the demo, we record how you reached us: the referring website's domain and any campaign tags on the link. It is stored with your account, never in your browser, and is used only to learn which channels bring new users.
Session cookies — a session cookie is used to keep you logged in. We also use a CSRF token cookie for security. No tracking cookies are used in the app.

3. How We Use Your Data

To provide and maintain the budgeting service.
To parse receipt images using AI (Anthropic Claude). Only the image content is sent to the AI provider — no account or financial data is included.
To fetch your brokerage activity from Interactive Brokers, if you have connected it. Your stored token is used only to make that request and is never returned by our API or shown in the app beyond the last four digits of the query id.
To value your holdings and convert between currencies, by requesting prices and exchange rates from market data providers. These requests carry only ticker symbols, currency codes, and dates.
To send transactional emails (e.g., workspace invitations) if you configure email settings.

4. Third-Party Processors

Provider	Purpose	Data shared
Cloudflare	Hosting, DNS, receipt image storage (R2)	Receipt images
Anthropic	AI receipt parsing	Receipt image content only
Google Analytics	Landing site traffic analysis, only if you accept	Pages visited, browser and device details, approximate location, and a cookie identifier (landing site only)
Interactive Brokers	Retrieving your brokerage activity, only if you connect it	Your Flex Web Service token and query id

We also request market prices and exchange rates from Yahoo Finance, the European Central Bank (via Frankfurter), and TwelveData. These are not listed above because they receive no personal data: each request carries only a ticker symbol, a currency code, and a date. Nothing identifying you, your account, or your workspace is sent to them, and they are not told what you own.

5. Data Storage and Security

Your data is stored on a VPS hosted in Europe. Passwords are hashed using bcrypt. All connections use HTTPS. Receipt images are stored on Cloudflare R2 with time-limited presigned URLs (not publicly accessible).

Broker credentials get stronger treatment than the rest of your data. The IBKR token and query id are encrypted with AES-256-GCM before they reach the database, using a key derived separately for this purpose, so a database copy on its own does not expose them. They are decrypted only in the code path that calls IBKR, and no part of our API can return them: the app shows you only the last four digits of the query id, and never the token.

6. Your Rights (GDPR)

As an EU resident, you have the right to:

Access — request a copy of your personal data.
Rectification — correct inaccurate data.
Erasure — request deletion of your account and all associated data.
Portability — receive your data in a structured format.
Object — object to processing of your data.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active. To delete it, email [email protected] and we will permanently remove your account within 30 days: personal data, financial and investment records, receipt images, and any stored broker credentials. There is no recovery after deletion. Deleting your account is not yet a self-service button in the app, so the request has to reach us by email.

Disconnecting a broker is not deletion. Removing an IBKR connection deletes the stored credential and stops all future syncing, but the holdings, trades, and cash activity already synced stay in your workspace, exactly like transactions you imported from a file. That history is yours and remains until you delete the records or the account.

8. Children

Tallyroot is not intended for users under 16 years of age. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance.

10. Contact

Németh Máté ev.
Email: [email protected]