Privacy Policy

• Account information: your name, business name, business location, username, and email address.
• Financial information you provide: profit-and-loss statements, budgets, revenue and expense detail, sales figures, and the assumptions you enter (for example sales pace, cancellation rates, and planned changes).
• Generated information: the forecasts, budgets, scenarios, and reports the platform builds from your data.
• Billing information: payment is processed by Stripe. We do not receive or store your card number.

You own the financial data you upload and every forecast, budget, and report generated from it. Our license to it is limited: we use it only to operate the service for you, to support you, and to verify your setup. We claim no other rights to it.

Access is limited to the small RecurCast team, and only for two purposes: supporting you, and the setup and verification work we perform on your behalf. There is no general browsing of client financials. Passwords are stored only as one-way cryptographic hashes — no one, including us, can read them.

• We do not share your data with your franchisor or corporate organization.
• We do not share your data with other franchisees or other RecurCast clients.
• We do not sell your data, and we do not use it for advertising.
• We do not use your data for benchmarking. If a benchmarking feature is ever introduced, participation will be opt-in and the data anonymized — you would be asked first, never told after.

Data is hosted on enterprise cloud infrastructure: a Postgres database managed by Supabase (running on Amazon Web Services) and application hosting on Vercel. Data is encrypted in transit (TLS) and at rest. Automated backups are taken daily. Access to production systems is restricted to the RecurCast team.

We use a small number of service providers to run RecurCast, each only for its stated purpose: Supabase (database hosting), Vercel (application hosting), and Stripe (payment processing). We will notify subscribers before adding a subprocessor that handles financial data.

• While subscribed: your budgets and reports are exportable at any time (Excel and PDF).
• On cancellation: we provide a complete export of your actuals, budgets, forecasts, and assumptions in Excel.
• After cancellation: we retain your data for 90 days in case you return, then purge it. At your request, we will delete it sooner.

If we become aware of a breach of security affecting your data, we will notify you without undue delay, tell you what we know, and tell you what we are doing about it.

For clients operating in Canada, we handle personal information in a manner consistent with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law, including British Columbia's Personal Information Protection Act. Your business's financial data receives the protections in this policy regardless of where you operate.

If this policy changes in a way that affects how your data is handled, we will tell you before the change takes effect. Questions and requests (access, export, deletion): support@recurcast.com.