Privacy policy

Who we are

Opticosts (“we”) provides a web application that helps users understand spending and estimated CO₂ impact, compare anonymously with peer cohorts, and discover relevant partners. Contact for privacy requests will be published before launch.

Data we store

• Account: name, email, authentication sessions (Auth.js), optional Google sign-in identifiers.
• Profile: profession, age band, region, lifestyle tags, peer-comparison consent flag.
• Expenses: amounts (EUR cents), dates, merchants/notes, category, computed CO₂ grams, optional receipt image URLs.
• Product data: recommendations, savings plans, notifications, subscription status (Stripe IDs), marketplace clicks.
• Business listings: organization profile and placement settings for BUSINESS accounts.
• API keys (hashed) for B2B API access; request metadata for rate limiting.

Peer comparison consent

During onboarding you can consent to include anonymized spending in peer cohort aggregation. If you decline or later turn consent off, you are excluded from aggregation and may see baseline-only comparisons. Cohort stats never expose individual users (k-anonymity threshold applies).

Legal bases (draft)

Contract (providing the service), consent (peer comparison, optional marketing), and legitimate interests (security, product improvement) — to be finalized with counsel.

Your rights

• Access and portability (download your data from Settings).
• Rectification of profile information.
• Erasure: request account deletion (soft-delete; receipt images removed; expense anonymization after a retention window).
• Withdraw peer-comparison consent at any time.
• Lodge a complaint with the Autoriteit Persoonsgegevens (AP).

Data processors

• Vercel — hosting and edge delivery
• Neon — PostgreSQL database
• Stripe — payments and subscription billing
• Anthropic — AI for receipt parsing and tip generation

Subprocessors and DPA status will be listed in the final policy. We do not sell personal data.

Cookies & analytics

Essential cookies support authentication. We aim for cookie-less, privacy-respecting analytics without ad trackers. Details TBD before launch.

Retention

Active accounts retain product data while the service is used. Deleted accounts follow soft-delete then anonymization timelines documented in product settings. Exact periods pending legal review.