Privacy Notice
This notice describes what the current public preview actually does. The legal operator and a monitored privacy contact must be confirmed before a public launch.
1. Scope and operator
GigaBooks provides a public website and a signed-in bookkeeping workspace. The operator's legal identity and contact information are awaiting confirmation; this notice does not identify an unverified company as the operator.
2. Account information
When the public account service is configured, the sign-in form submits the email address you enter and, for password sign-in, your password to that service. Email sign-in and password recovery require email delivery to be configured. Optional Google sign-in requires the provider to be enabled; it may return account information such as your email, identifier, and profile details.
The app uses the resulting session to show your workspace and to sign you out. Hosted sign-in availability, email delivery, retention settings, and optional provider settings have not been verified for this preview.
3. Financial records
When you are signed in, the records you enter or import — your setup answers (work type, state, filing status, income pattern, estimated payments made), income and expense items, categories, trips, and an activity timeline of your changes — are stored in the public account service, linked to your account, and readable only by your account. CSV files are read in your browser and only the rows you import are saved. Category suggestions are made by keyword rules in your browser; no description is sent to an AI service. Estimates and planning numbers you type (balances, bills, contributions) are calculated in your browser and not saved.
GigaBooks does not connect to financial institutions, accept receipt images, or file taxes. Do not enter payment credentials or account numbers.
4. Hosting and diagnostics
Lovable serves this public website. Website and account-service requests can expose technical request information, such as IP addresses and browser headers, to the relevant hosting or authentication provider. The public account service is owner-configured separately.
The app writes limited technical errors to the browser console, with token-like values redacted. Lovable preview diagnostics may receive runtime errors to help troubleshoot the preview. This is not an account-level activity report.
Product analytics are disabled in the public build. There is no waitlist form, advertising integration, or implemented marketing-email campaign. Email-domain setup alone does not send product emails.
5. Browser storage
The account client uses browser storage and same-origin cookies for session restoration and sign-in verification. These support account access rather than advertising. Signing out requests that the account service end the session; it does not delete an account.
Use HTTPS and a trusted device for account access. This notice does not assert a specific hosting region, encryption-at-rest standard, or provider retention period that has not been verified.
6. Rights and retention
Depending on applicable law, you may have rights to request access, correction, or deletion of personal information. The Account section lets you download all of your records and permanently delete your records. There is no self-service account-deletion for the sign-in account itself and no privacy-settings screen; closing the sign-in account requires manual handling by the operator, once a monitored contact is confirmed.
Account information and provider logs follow the account and hosting services' configured retention settings. Those settings and a request-handling process must be confirmed before launch; no fixed deletion or retention timeline is promised here.
7. Changes and contact
Changes to this notice will be posted on this page with an updated date. Email notifications are not implemented. A monitored privacy/security contact and the legal operator's details are awaiting owner confirmation. Do not rely on an unverified mailbox for urgent requests.