Privacy Policy

Last updated: April 15, 2026

1. Information We Collect

We collect your email address and password when you create an account. We also collect API keys from third-party platforms (Stripe, PayPal, Gumroad) that you voluntarily provide to connect your income sources. These keys are encrypted using AES-256 encryption and are never shared with any third party.

2. How We Use Your Information

Your information is used solely to provide the IncomeBase service — fetching your income data from connected platforms and displaying it on your dashboard. We do not sell, rent, or share your personal information with any third parties for marketing purposes.

3. API Key Storage

API keys you provide are encrypted at rest using industry-standard AES-256 encryption. Keys are only decrypted temporarily when making authorized API calls on your behalf. We never store keys in plain text and never log them in any system.

4. Data Security

We use Supabase for our database infrastructure, which provides enterprise-grade security including row-level security, SSL encryption in transit, and regular automated backups. Our application is hosted on Vercel with HTTPS enforced on all connections.

5. Third-Party Services

IncomeBase connects to Stripe, PayPal, and Gumroad APIs on your behalf using credentials you provide. We are not affiliated with these companies. Your use of these platforms is subject to their respective terms of service and privacy policies.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all associated data including encrypted API keys will be permanently deleted within 30 days.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can disconnect any platform integration or delete your account from your dashboard settings. For any data requests, contact us at privacy@incomebase.app.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, please contact us at privacy@incomebase.app.