Privacy Policy
Aggregate ("we") puts the money of your companies in one place. This page says what we collect, why, where it lives, and how to get rid of it. It describes the hosted service at aggregate.finance. If you run Aggregate yourself, your data stays on your own server and this policy covers none of it.
Aggregate is operated by Yisrael Gottlieb, doing business as Aggregate ("we"), 1401 Pennsylvania Ave, Wilmington, DE 19806-4124, USA. Contact: privacy@aggregate.finance.
What we collect and why
- Your sign-in details. Email address, name, and passkeys or Google/Apple sign-in if you use them. We use them to sign you in and to send sign-in links, invites and the notices you turn on.
- Financial data you connect. When you connect a bank, card, payment processor, payroll or accounting service (through Plaid or a direct connection), we receive accounts, balances, transactions, invoices, payroll totals and similar records. We use them to show you your numbers, and for nothing else.
- What you add. Entries, notes, buckets, rules, the cap table, and documents you upload or email in (receipts, bills, statements), including the text we read from them.
- AI activity. When you connect an AI (Claude, ChatGPT or an agent key), we log every call it makes: which tool, when, which companies, whether it worked, plus the network address and app name it called from. Writes keep a record of who made them, so you can review and undo them.
- Security records. Sign-in sessions keep the network address and browser they came from. Invites, exports and permission changes are logged with who made them and when. These protect your account.
We don't collect anything beyond this. There are no ads, no analytics or tracking scripts, and no third-party cookies. Cookies are used only to keep you signed in.
What we never do
- We never sell your data or share it for anyone's marketing.
- We never use your data to train AI models, including what we read from your banks and from apps like QuickBooks and Xero, and we don't let anyone else do so.
- Aggregate never moves money. It reads your accounts and keeps records; it can't pay, transfer or contact anyone for you.
Where it is stored and how it is protected
- Hosted: on our servers and our file storage, in the United States (Fly.io for the app, Neon for the database, Cloudflare R2 for files and backups).
- Self-hosted: on your server. We never see it.
- Connection tokens and other secrets are encrypted with envelope encryption: each secret has its own AES-256-GCM key, which is itself encrypted with a master key kept outside the database.
- Traffic is encrypted in transit (HTTPS).
- Only the people who run the hosted service can reach the servers, and they look at your data only when needed to keep the service working or when you ask for help. Today that is only the founder. Access to the servers needs multi-factor sign-in, and every action inside Aggregate is recorded in a tamper-evident activity log.
- People see only the companies and data their role allows. Your Personal space is private to you unless you choose to share it.
AI clients
An AI you connect sees only what you grant it: which companies, which kinds of data, and whether it may add records. You can change or revoke that at any time in Settings → AI, or pause every AI with one switch. Once you revoke access, the AI gets nothing more. What an AI already received is governed by that AI provider's own terms.
Plaid
We use Plaid to connect many banks and cards. When you connect an account through Plaid, Plaid's End User Privacy Policy applies to the data Plaid collects: https://plaid.com/legal/#end-user-privacy-policy
Who processes data for us
| Provider | What for |
|---|---|
| Plaid | Connecting banks and cards |
| Other services you connect (Stripe, QuickBooks, Mercury and others) | Reading the data you chose to connect |
| Resend | Sending sign-in links, invites and notices |
| Fly.io, Neon, Cloudflare (R2 and DNS) | Running the service, the database, storing files and backups, and routing traffic |
| Frankfurter (frankfurter.dev) | Currency exchange rates. Only currency codes and dates are sent, never your data. |
Keeping and deleting your data
- Disconnect a connection and we revoke our access at the provider and stop syncing.
- Export everything in Preferences → Export, as one file.
- Delete your workspace in Preferences (owners only). This revokes every connection at the provider and erases all of the workspace's records, documents and AI activity. Your sign-in account stays so you can keep using other workspaces. You can also delete your sign-in account entirely in Preferences; if you are the only owner of a workspace, you first make someone else an owner or delete the workspace.
- Encrypted backups are kept for 30 days, so deleted data is gone from backups within 35 days.
- We keep your data while your workspace exists. We don't delete inactive workspaces automatically; if a workspace hasn't been used for 90 days, we email its owners in case they want to disconnect or delete it.
Your rights
You can see, export, correct and delete your data yourself, as described above. For anything else, or to make a request under laws like GDPR or CCPA, write to privacy@aggregate.finance. California residents have rights under the CCPA, including to know, delete and correct personal information; we do not sell or share personal information as those terms are defined there. Aggregate is offered to people and businesses in the United States.
Children
Aggregate is for businesses and adults. It is not meant for anyone under 18.
Changes
If we change this policy, we'll update the date above and tell workspace owners by email before a material change takes effect.
Self-hosting
Aggregate is open source under the GNU AGPL v3. If you run it yourself, you control the data, and you are responsible for your own privacy policy toward the people who use your copy.
Contact
privacy@aggregate.finance · 1401 Pennsylvania Ave, Wilmington, DE 19806-4124, USA