← Back to Cresara

Privacy Policy

This Privacy Policy describes how Cresara ("we", "us") collects, uses, and protects your information when you use our service. We've kept it short because we collect very little. Cresara is operated by Cresara LLC, a limited liability company formed in Delaware, United States.

Information we collect

• Account information. Your email address, when you sign up.
• Financial account data. If you connect a brokerage or bank via Plaid, we receive balances and (where applicable) holdings information from those accounts. We do not receive or store your bank login credentials.
• Manually entered data. Anything you choose to add to Cresara — crypto holdings, manual assets, notes — is stored in your account.
• Usage logs. Standard server logs (IP address, browser type, requested URLs) retained briefly for security and debugging.

How we use it

We use your information only to operate the Cresara service: to authenticate you, display your portfolio, sync financial data, and send you the occasional account-related email.

We do not sell your data. We do not share it with advertisers. We do not use it to train AI models.

How we protect it

• Financial access tokens are encrypted at rest using AES-256-GCM before being stored in our database.
• All data is transmitted over HTTPS.
• We do not store passwords — authentication is via one-time codes sent to your verified email.
• We retain only what's necessary to operate the service.

Third parties

We rely on a small number of third-party providers to operate Cresara:

• Plaid — for connecting your bank and brokerage accounts. Your bank credentials are entered into Plaid directly, never us. See Plaid's privacy policy.
• Neon — for managed PostgreSQL database hosting.
• Netlify — for serverless infrastructure.
• Resend — for sending sign-in emails.
• Stripe — for processing payments. Your card information is provided to Stripe directly, never stored on our servers.

Your rights

You can export your data anytime from within the app. You can delete your account at any time by emailing hello@cresara.app, which permanently removes all your data.

Cookies

We use minimal local storage for session management. We don't use tracking cookies or third-party analytics.

Changes

If we materially change this policy, we'll notify you by email and update the "Last updated" date above.

Contact

Questions about your privacy? Email privacy@cresara.app, or reach us generally at hello@cresara.app. Cresara is operated by Cresara LLC, Delaware, United States.