Privacy Policy

Last updated: June 13, 2026

Sevro helps you find recurring charges by analyzing a bank-statement CSV you choose to upload. We built it to collect as little as possible: your CSV is read in your browser and never uploaded or stored, we never connect to your bank, and we don't sell your data or use it for advertising.

This Privacy Policy explains how Sevro ("Sevro," "we," "us") handles your information when you use Sevro(the "Service"). By using the Service, you agree to this policy.

Information we collect

Account information

When you sign up, we collect your email address and a password. Authentication is handled by our provider (Supabase); your password is hashed and we never see or store it in plain text.

Financial transaction data

When you import a bank statement, the CSV file is parsed entirely in your browser. We do not upload or store the original file. Only the normalized records extracted from it are sent to our database, namely: each transaction's date, description, amount, and currency, and the recurring-subscription information we derive from them (such as a detected merchant name, cadence, and your triage choices like "keep," "potential cut," or "not a subscription").

We do not connect to your bank, and we never ask for bank login credentials, account numbers, or OAuth access.

Billing information

If you subscribe to Sevro Pro, payments are processed by Stripe. Stripe collects your payment details directly — we never receive or store your full card number. We keep only what we need to manage your subscription: a Stripe customer and subscription identifier, your plan status, billing interval, and renewal date.

Usage and technical information

Our hosting and infrastructure providers automatically process limited technical data needed to run the Service securely, such as IP address and request metadata in server logs. We also use a privacy-preserving product-analytics tool (PostHog) to understand how the Service is used and to capture errors — for example, the pages you visit and actions like signing up, importing a statement, or starting an upgrade. This is deliberately configured to exclude your financial data: it does not record your screen, does not capture form inputs or the contents of your statements, and identifies you only by your account ID. We do not use third-party advertising trackers, and we don't sell your data.

How we use your information

To provide the Service — detect recurring charges and show your dashboard and totals.
To authenticate you and keep your account secure.
To process payments and manage your subscription if you upgrade to Sevro Pro.
To send essential transactional emails (for example, the email-confirmation link) and, if you're a Pro subscriber who hasn't opted out, price-increase and upcoming-charge alerts.
To understand product usage, fix problems, and improve the Service through privacy-preserving analytics.
To maintain, debug, and protect the Service.

We do not sell your personal information, share it with advertisers, or use your transaction data to train artificial intelligence models.

Cookies

We use essential cookies required to keep you signed in (a session cookie set by our authentication provider). Our analytics tool may also set a cookie or use local storage to measure product usage as described above. We do not use advertising cookies.

Service providers (sub-processors)

We share the minimum necessary information with trusted providers who process data on our behalf, under our instructions:

Supabase — database, authentication, and storage of your account and transaction data.
Vercel — application hosting and delivery.
Resend — delivery of transactional emails (receives your email address and the email contents; it does not receive your transaction data).
Anthropic — AI processing that cleans up and categorizes merchant names (receives the merchant description text from your statement to return a tidy name and category; it does not receive your amounts, and the data is not used to train models). Used only when this feature is enabled.
Stripe — payment processing for Sevro Pro (receives your payment details and email; it does not receive your bank-statement or transaction data).
PostHog — privacy-preserving product analytics and error monitoring (receives usage events and your account identifier; configured to exclude your statement data, with screen recording and automatic input capture disabled).

Data storage and security

Data is encrypted in transit (HTTPS). Access is protected by row-level security so each account can only read and modify its own data, and passwords are hashed by our authentication provider. Your data is stored on our infrastructure providers' servers, which may be located in the United States. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data retention and deletion

We keep your data until you delete it. You can permanently delete your account and all associated data at any time from Account → Delete account in the app. This removes your account and every transaction, detected subscription, price-change record, and statement record we hold for you. Deletion is immediate and irreversible.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing (for example under the GDPR or CCPA). You can exercise access and deletion directly in the app, or contact us at privacy@getsevro.com. We don't discriminate against you for exercising these rights.

Children

Sevro is not directed to children under 16, and we do not knowingly collect information from them.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above, and for material changes we'll take reasonable steps to notify you.

Contact

Questions about this policy or your data? Email us at privacy@getsevro.com.

Sevro is currently in limited testing. This Service is provided on an "as is" basis — see our Terms of Service for details.