Privacy Policy

This policy explains how Cashmere (“we”, “us”) collects, uses, discloses and protects personal data. It applies to this website (cashmere.money), the Pocket and Academy apps at app.cashmere.money, the Cashmere Connect browser extension, and the assistant Finn.

We handle personal data under the Personal Data Protection Act 2012 of Singapore (PDPA). By using Cashmere, you agree to the collection, use and disclosure described here.

We collect only the data you give us or that the service needs to run:

• Account data. Your email address and password, or the email address, name and picture Google gives us if you sign in with Google. Your display name, avatar and region.
• Financial data you enter. Accounts and balances, income, spending, transactions and categories, your plan and its assumptions, tax details, insurance policies and investments.
• Statements you import. The PDF, spreadsheet or picture you upload, and the transactions we extract from it.
• Bank pages you send with Cashmere Connect. The text of a bank page you opened, after masking (see section 4).
• Broker credentials you add. If you connect Interactive Brokers, the Flex token and query ID you give us.
• Finn conversations. The questions you ask and the answers Finn gives.
• Household data. The email address of a person you invite to share your Pocket.
• Notification settings. If you turn on notifications, your browser’s push endpoint, the hour you chose and your time zone.
• Academy records. Your enrolment, attendance, assessment results, submitted work and the feedback on it.
• Messages to us. The content of emails you send us.

We do not collect your bank login, card numbers for payment, or your NRIC. The website collects no analytics, sets no cookies and loads no advertising or tracking scripts.

We use your personal data to:

• Sign you in and keep your Pocket available on your devices.
• Calculate your plan, runway, tax, cover and investment figures.
• Convert statements and bank pages into transactions, and sort them into categories.
• Answer your questions in Finn.
• Send the notifications you turned on.
• Run Academy courses and assess your work.
• Reply to your messages, and enforce our Terms of Service.
• Find and fix faults, and prevent abuse of the service.

We do not sell or rent personal data, show advertising, or use your data to train AI models.

Some features send data to an AI model to do their work. A model gets data only when you start the action.

• Statement imports send the whole statement to OpenAI. Scanned pages and pictures go to Google Cloud Vision first, to read the text. If a PDF has a password, your device unlocks it, and the password never leaves your device.
• Cashmere Connect replaces email addresses, NRIC and FIN numbers, and account, card and phone numbers in your browser before the page is sent. You can strike out more text before you send it.
• Finn sends your question, a short part of the conversation so far, and the numbers Pocket already calculated for the question, such as account names and balances. Finn may run a web search, which sends a search query to OpenAI’s search tool.
• Category sorting sends transaction descriptions and amounts.

If you connect Claude or ChatGPT to your Pocket, it can see your plan, balances, transactions, holdings and tax estimate. You choose to connect it, and you can disconnect it in Settings at any time. Anthropic’s terms apply to how Claude uses that data, and OpenAI’s terms apply to ChatGPT. On a personal ChatGPT plan, OpenAI may use your conversations to train its models unless you turn this off in ChatGPT’s data controls. Nothing an assistant proposes is saved to your Pocket until you approve it.

OpenAI processes this data under its API terms. It does not train its models on API data, and it may keep the data for up to 30 days to monitor abuse before deleting it. A model’s output can be wrong. Nothing Finn drafts is saved to your Pocket until you approve it.

These companies process personal data for us, only to provide the service:

• Supabase: sign-in, database and file storage, in Singapore.
• Cloudflare: the servers that run imports, Finn, notifications and market prices.
• Render: hosting for this website and the apps.
• OpenAI: the AI models described in section 4.
• Google: Google sign-in, if you use it, and Google Cloud Vision text recognition.
• logo.dev: merchant logos. Your browser requests a logo by the merchant’s web address.
• Your browser’s push service (Apple, Google or Mozilla): delivery of notifications.

Market price and exchange rate providers receive ticker symbols and currency codes only, never who holds them. If you connect Interactive Brokers, we call its Flex service with your token to read your positions.

We also share personal data with the people you invite to your Pocket, and when the law requires it. A person you invite to share your Pocket sees everything in it, including Finn conversations.

Your Pocket is stored in Singapore. OpenAI, Google, Cloudflare and Render process data in other countries, including the United States. We transfer data to them only under contracts that require a standard of protection comparable to the PDPA.

• Your Pocket: until you reset it or ask us to delete your account.
• Uploaded statement files: deleted when the import finishes, and never kept longer than 24 hours. The transactions extracted from them stay in your Pocket.
• Text read from a statement: kept for 24 hours to investigate a failed import, then deleted.
• Bank pages from Cashmere Connect: not kept after the transactions are extracted.
• Finn conversations: deleted 30 days after the conversation was last used.
• Server logs: deleted after 3 days.
• Notification settings: until you turn notifications off.
• Academy records: for as long as you keep your Academy access.

If you use Pocket without signing in, your data is stored only in your browser, and we never receive it.

This website sets no cookies. It saves your light or dark theme choice in your browser. The apps save your sign-in session, unsaved drafts and your progress through the tutorials in your browser’s local storage, and cache their own files so they open quickly. None of this storage is used for advertising or tracking.

Under the PDPA you can:

• Ask what personal data we hold about you, and how we used and disclosed it in the past year.
• Ask us to correct personal data that is wrong.
• Withdraw your consent to our use of your data. We then stop the processing, and may need to close your account.
• Ask us to delete your account and all its data.

You can do some of this in Pocket yourself. Export gives you a month of your Pocket as a PDF, Excel or JSON file. Reset Pocket in Settings deletes every record in your Pocket. To delete your sign-in, or to make any other request, email us at hello@cashmere.money. We reply within 30 days.

Every connection uses HTTPS, the database encrypts stored data, and row-level security lets an account read only its own Pocket. No system is fully secure, so we cannot guarantee that a breach will never occur. If a breach is likely to cause you significant harm, we tell you and the Personal Data Protection Commission as the PDPA requires. Security describes the protections in more detail.

Cashmere is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you think a child gave us personal data, email us and we will delete it.

We update this policy when the service changes. The date at the top shows the last update. If a change affects how we use data you already gave us, we tell you in the app before it applies.

For questions about this policy or your personal data, email hello@cashmere.money.