Privacy

Audit records and financial inputs are private. Financial data is self-reported and requires no banking access or Stripe secrets. Reports must be restricted to the authenticated owner. This build loads no advertising trackers.

Before launch: confirm controller identity, privacy contact, retention periods, processors, transfers and deletion procedures. This draft is not a final privacy policy.