Infrastructure and Security

As we deal with sensitive user information (finances), we strive to ensure that our infrastructure and overall app are safe and secure. Our web app is deployed with Vercel, the Database is secured with Supabase (https://supabase.com/security), and Clerk handles the Authentication. In addition, we have configured tight security policies using Supabase's Row Level Security (RLS), ensuring that your data is only visible and accessible to you.

To take it one step further, we've also conducted some preliminary pen-testing on our web app to ensure a smooth user experience, ensuring precautions are taken to mitigate against DDoS attacks as well as other security measures.

Terms of Service

1. Acceptance of Terms By accessing or using Dollar Pilot (“we”, “us”, “our”) services, you (“user”) agree to these Terms of Service.

2. Eligibility You must be at least 16 years old to use our services. To be able to use Dollar Pilot, you will need to sign up for an account using your Google account.

3. Account Security You are responsible for maintaining the confidentiality of your account information and are liable for any activities under your account. We do not store any passwords and we are only authenticating users through OAuth, with their Google accounts.

4. Use of Service Our services are for personal use only, and you agree not to misuse them, including any form of unauthorized access, distribution, or sale of content and services.

5. Intellectual Property Content on Dollar Pilot, including text, graphics, and logos, is protected by copyright and other laws. Unauthorized use is prohibited.

6. Third-Party Links We may provide links to external sites. We are not responsible for the content, privacy, or security practices of these sites.

7. Disclaimer of Warranties Services are provided “as-is” and “as available” without warranties of any kind.

8. Limitation of Liability We are not liable for any indirect, incidental, or consequential damages from the use of our services.

9. Changes to Terms We reserve the right to modify these terms at any time. Continued use signifies acceptance of any changes.

Privacy Policy

1. Information Collection Dollar Pilot (“we”, “us”, “our”) collects the personal information you provide directly to us, including your name, email address, financial information, and usage data. This information helps us deliver, improve, and personalize our services. We may also collect data automatically when you use our services, such as IP addresses, device information, and usage patterns, to enhance functionality and security.

2. Purpose of Data Collection and Usage Your personal data is used to:

• Provide and improve our services, including enhancing functionality and user experience.

• Communicate with you regarding account activities, updates, or customer service needs.

• Perform data analytics to improve website performance and service offerings.

• Comply with legal and regulatory requirements.

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data sharing is limited to situations required for service functionality, legal compliance, or specific consent obtained from you.

3. Consent and Notification In accordance with Singapore’s PDPA, we collect, use, or disclose your personal data only with your informed consent. You will be informed of the purpose of data collection, and your consent is required before we proceed. You may withdraw your consent at any time by contacting us; however, this may impact the services we can provide.

4. Data Security We prioritize the security of your personal data. We implement industry-standard measures, including encryption, access controls, and regular security audits, to protect against unauthorized access, disclosure, or modification of data. However, please note that no online system is entirely secure, and while we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention We retain your personal data only as long as necessary for the purposes it was collected, to comply with legal obligations, or to enforce our policies. Once data is no longer needed, it is securely deleted or anonymized in accordance with our retention and deletion policies.

6. Access, Correction, and User Rights Under Singapore’s PDPA, you have the right to:

• Access your personal data held by us and know how it has been used or disclosed within the past year.

• Correct any inaccuracies in your personal data.

• Withdraw consent for certain types of data processing, subject to legal limitations.

For assistance in accessing, correcting, or managing your personal information, please contact us.

7. Cookies and Tracking Technologies We may use cookies and similar tracking technologies to enhance your experience, such as remembering your preferences and improving site performance. You can manage or disable cookies through your browser settings, although disabling cookies may affect some site features.

8. Data Transfer and International Transfers We may transfer personal data to third-party service providers, some of whom may be located outside of Singapore, to support our services. We ensure that such transfers are compliant with the PDPA and that your data is protected by requiring all third-party service providers to have adequate safeguards in place.

9. Third-Party Services and Sharing Your personal data is not shared with third parties unless required for essential services, such as payment processing, regulatory compliance, or other legal obligations. These third-party providers are bound by confidentiality agreements and are prohibited from using your data for purposes outside of our agreed scope.

10. Data Breach Notification In the event of a data breach involving your personal data, we will notify affected individuals and the Personal Data Protection Commission (PDPC) if there is a risk of significant harm. We will take immediate steps to mitigate the breach and prevent future occurrences.

11. Changes to this Privacy Policy We may update this Privacy Policy periodically to reflect changes in legal requirements or our data practices. The date of the latest revision will be displayed at the top of this policy. We encourage you to review this policy regularly to stay informed.

12. Contact Information If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: [e-mail]