Privacy Policy
ExactSplit ("we", "us") helps self-employed people in the United States estimate their taxes and keep their books. This policy explains what we collect, why, who else touches it, how long we keep it, and how to get rid of it. It is written to be read. If anything here is unclear, email hello@exactsplit.com.
The short version
We connect to your bank read-only through Plaid. We never see your bank login. We never move money at your bank. The optional wallet is run by Whop; if you switch on auto-split there, we move the tax share between your own wallets, and nowhere else. If you choose to share how you classify merchants with others in your trade, we pool only the merchant name and your verdict, never amounts, dates or anything that identifies you, and use a verdict only when at least three people agree. If you invite an accountant, they see your books and tax figures until you remove them. If you allow the partner who referred you to pay you into your wallet, we give that partner the wallet's bank deposit details and nothing else. Bank access tokens are encrypted before they are stored and are never returned by any part of the product. Your data is used to run the service you signed up for, which means your estimate, your books, your tax forms and exports, and your wallet's auto-split, and for nothing else. You can delete everything by deleting your account, and deletion also revokes our access at the bank.
What we collect
Account information. Your email address and the identifier our authentication provider assigns you. We do not store passwords; sign-in is handled by our authentication provider.
Financial data. When you connect a bank through Plaid we receive transactions (date, amount, merchant, description, category, and location when the bank provides it), account names and masked account numbers, and account balances. We receive an encrypted access token that lets us refresh this data. We do not receive your bank username or password at any point.
Information you enter. Your trade or occupation, filing status, other household income, withholding, prior-year tax and adjusted gross income, retirement contributions, health insurance premiums, state rate, business trips, estimated payments you tell us you made, and any corrections you make to how a transaction is classified.
Wallet payments. For payments into your ExactSplit Wallet we store the amount, the date, the description, the payer's email address when there is one, and for stablecoin deposits the token and amount, along with how you classified each one and the tax share moved. We use these to count your income and run auto-split.
Usage data. Server logs (IP address, browser, pages requested) kept for security and debugging, and an audit trail of significant actions on your account such as connecting or removing a bank, changing settings, and exporting data.
What we do with it
We use your data to compute your tax estimate, derive how much to set aside from each deposit, track your reserve, classify your transactions, produce tax forms and exports for you and your preparer, and answer questions you ask about your own spending. We also use it to run the service: authentication, billing, security, and support.
We do not sell your data. We do not share it with advertisers. We do not use your financial data to train machine learning models, and we contractually prohibit our processors from doing so.
Who else processes it
We use a small number of service providers, each for one job:
- Plaid, our bank-connection provider, connects to your bank and delivers transactions and balances. Plaid's own privacy policy governs what it collects during the connection flow.
- An authentication provider handles sign-in, sessions, and account email.
- A database hosting provider stores our database in the United States.
- An application hosting provider runs the application.
- A DNS and email routing provider serves our domain.
- An email delivery provider sends the invitation when you invite your accountant, which includes your email address and theirs.
- An AI model provider classifies merchants. For classification we send merchant names, the direction of the transaction, a typical amount, and a transaction count, aggregated per merchant, together with the trade you told us. We do not send individual transaction dates, balances, or account details for classification. If you use the optional "Ask your books" feature, questions and relevant slices of your transaction data are sent to produce an answer. That feature is off by default and is enabled only once a data processing agreement and zero data retention are in place with the provider.
- Dodo Payments is the merchant of record for subscriptions and processes payments. We never receive your card number.
- Whop provides the optional ExactSplit Wallet. If you open one, we send Whop your email address and an internal identifier so it can create your account, and we store the Whop account identifier. Whop runs identity verification and holds wallet data under its own privacy policy; we do not receive your identity documents. To count your income and run auto-split, we read payments and stablecoin deposits into your wallet from Whop and store the records described under "Wallet payments" above. Your wallet balance is shown to you by Whop and is not stored by us.
Each provider is bound by contract to use your data only to provide its service to us.
How we protect it
Bank access tokens are encrypted with AES-256-GCM before they reach our database and are decrypted only inside server-side calls to Plaid. They are never written to logs in plain form and never returned by any endpoint. Every database query is scoped to your account at the data access layer, so one customer's data cannot be read by another. The exceptions are ones you switch on: an accountant you invite, and pooled merchant verdicts, which contain only a merchant name and a classification. All traffic is encrypted in transit. Access to production systems is limited to the people who operate them.
Because we hold consumer financial information, we treat the Gramm-Leach-Bliley Act Safeguards Rule as applying to us and maintain a written information security program accordingly.
How long we keep it
We keep your data for as long as your account is open. Transaction history is retained across tax years because prior-year figures feed the current year's estimate. Server logs are retained for a limited period for security purposes. When you delete your account, your data is deleted as described below.
Deleting your data
Deleting your account deletes your transactions, accounts, rules, settings, trips, payments, wallet payment records, and audit history from our database. Before that happens, we call Plaid to revoke our access to each connected bank, so the connection is gone at the bank as well as with us. If Plaid cannot be reached, we keep the record until the revocation succeeds rather than leave an active connection you can no longer see. You can remove an individual bank connection at any time from the dashboard.
Exports you have downloaded are your copies and are not affected. Deleting your ExactSplit account does not close your wallet at Whop or move its money; withdraw your funds first, and close the wallet with Whop.
Your rights
You can access and export your data at any time from the dashboard. You can correct any figure you entered. You can delete your account. If you are a California resident, you have the rights described in the California Consumer Privacy Act, including the right to know what we collect and the right to delete it; we do not sell personal information and we do not discriminate for exercising these rights. To make a request, email hello@exactsplit.com from the address on your account.
Children
ExactSplit is for adults running a business. We do not knowingly collect data from anyone under 18.
Changes
If we change this policy in a way that matters, we will email the address on your account before the change takes effect. The date at the top is the date of the current version.