Legal

Privacy Policy

This policy explains what we collect, why, who we share it with, and how long we keep it. The short version: we collect what we need to run the product, we never sell your data, and you can leave with everything anytime.

Effective May 18, 2026

1What we collect

Account data. Name, email, organization, billing address, and the metadata our identity provider gives us about your sign-in method.

Financial data. When you link an account through our aggregation partners, we receive balances, holdings, and transactions. We never receive or store your bank/brokerage credentials.

Manual data. Anything you enter yourself — entities, beneficiaries, manual holdings, documents.

Usage data. Page-views, feature-use, performance metrics, and error logs — collected to operate and improve the product.

Device data. Browser, OS, IP address (collected for security and fraud prevention; not used for ad targeting).

2How we use it

To operate and improve the Service.
To produce your reports, balance sheet, cash-flow calendar, and Domi responses.
To bill you (via our payment processor) and provide receipts.
To send transactional emails (sign-in links, billing notices, security alerts).
To detect and prevent fraud, abuse, and security incidents.
To comply with our legal obligations.

3What we don't do

We don't sell your data — ever.
We don't share it with advertisers.
We don't use your portfolio to train AI models. (Our model providers operate under zero-data-retention agreements.)
We don't run ad-tech or third-party tracking pixels on the signed-in product.

4Who we share with

A short list of vendors necessary to run the product:

Cloud hosting provider — hosting and edge delivery.
Managed database provider — managed Postgres for application data.
Identity / SSO provider — identity, SSO, MFA, passkeys.
Payment processor — payment processing.
Financial account aggregation partners (multiple) — account aggregation (only when you connect).
LLM inference providers — AI inference (zero-data-retention).
Transactional email provider — transactional email.
Error-monitoring provider — error monitoring (scrubbed of personal data).

Each vendor has a current Data Processing Agreement with DomusOS, available on request.

A current list of named sub-processors is provided under NDA on request.

5How long we keep it

Account & financial data: for the life of your subscription + 30 days after cancellation.
Backups: 35 days of point-in-time recovery snapshots.
Audit logs: 1 year for security-relevant events.
Billing records: 7 years (tax retention requirement).

You can request earlier deletion at any time (see §7).

6Security

TLS 1.3 in transit. AES-256 at rest. Per-tenant KMS keys. End-to-end encryption for team messages is built on the Signal protocol and being rolled out: today, per-device keys are generated in your browser, and full encrypted message delivery is in active development. Annual penetration testing. See our Trust Center for the full posture.

7Your rights

Depending on where you live, you have the right to:

Access the personal data we hold about you (Settings → Privacy → Download archive).
Correct or update it (Settings → Profile).
Delete it (Settings → Account → Delete account).
Object to or restrict certain processing.
Lodge a complaint with your local data-protection authority.

Email privacy@domusos.iofor anything we don't let you do in-app, and we'll respond within 30 days.

8Cookies

We use a small number of cookies:

Session cookies — to keep you signed in (set by our identity provider).
Preference cookies — to remember your theme, density, and mode.
Anti-CSRF cookies — to protect form submissions.

We do not use third-party advertising cookies or cross-site tracking pixels on any DomusOS-controlled surface.

9Changes

If we make a material change to this policy, we'll email the address on file at least 30 days before it takes effect. Non-material clarifications are dated at the top of this page.

10Contact

privacy@domusos.io · DomusOS, Inc., Attn: Privacy, Chicago, IL.