Privacy Policy

Berri is a personal finance accountability product built by Shakra Labs LLC (“Berri,” “we,” “us”). This policy explains what information we collect, how we use it, and the choices you have. The short version: we collect only what the product needs, we never see your bank credentials, and we never sell your data.

Information we collect

Account information. When you create an account we collect your email address and basic profile details through our authentication provider.

Financial data. When you link a financial institution, our aggregation partner (Plaid) provides us read-only access to account balances, transactions, and liabilities. You link accounts directly with Plaid, so your bank username and password are never sent to or stored by Berri.

Operational data. Our infrastructure processes bounded security, authentication, error, and reliability logs needed to operate and protect Berri.

Website analytics. We use Vercel Web Analytics on our public marketing website to understand traffic and improve the site. It processes page URLs, filtered query parameters, referrers, approximate location, and browser and device information to produce aggregate statistics. We do not add account details, financial records, chat content, or contact-form messages to analytics events. See Vercel’s Web Analytics privacy documentation for details.

Communications. If you contact us for support, privacy, or billing help, we keep the correspondence needed to handle your request.

Chat and preferences. We store the questions you send, Berri’s answers, conversation history, saved progress, and the preferences you provide so you can return to your conversations and receive relevant responses. A chat may contain financial or other personal information you choose to include.

Billing information. Polar handles checkout and subscription billing as our merchant of record. We receive customer and subscription identifiers, membership status, and billing-period information needed to manage your access. Payment details are submitted to Polar and its payment providers. Their processing is also described in Polar’s privacy policy.

How we use your information

We use your information to run Berri: showing your dashboard, analyzing spending and debt, helping you explore payoff and savings plans, answering your questions, managing your membership, and responding to support requests. We also use it to secure the service, prevent abuse, and improve the product.

AI coaching and processing

Berri routes AI requests through Vercel AI Gateway to authorized providers, currently OpenAI, Microsoft Azure hosting OpenAI models, and Anthropic. If a request fails or a provider is unavailable, another authorized provider may handle a retry. The Gateway and the providers handling those attempts process your question, relevant conversation context, and the financial information needed to generate an answer. We use provider services under terms that prohibit training on this data. That restriction is different from retention: providers may keep certain operational, safety, billing, or legally required records under their applicable terms and data controls.

Once a question is accepted, Berri can continue processing it if you close the tab or lose your connection. Saved progress and answers let you return to the conversation. Use Stop in the conversation to request cancellation; work ends on completion, cancellation, or a processing limit or failure. Stopping a run does not delete its existing conversation history or cancel your subscription.

Cookies and browser storage

Berri and its authentication and security providers use cookies and similar browser storage to keep you signed in, protect sessions, remember preferences, and support service recovery. You can manage this storage through your browser, but blocking or clearing it may sign you out or prevent parts of Berri from working. We do not use advertising cookies. Vercel Web Analytics does not use analytics cookies or track visitors across different websites.

How we protect it

Connection tokens are encrypted at rest using cloud KMS envelope encryption. Data is encrypted in transit with TLS. Access to production systems is restricted and logged. No system is perfectly secure, but we treat your financial data with the caution we’d demand for our own.

What we share, and what we never do

We disclose data to the providers that make Berri work, including aggregation, cloud infrastructure, authentication, email delivery, billing, website analytics, and AI providers. When they process data on our behalf, we require them to use it for the services they provide to us. Some providers, including Plaid and Polar, also process certain records for their own legal, payment, fraud-prevention, and other purposes described in their privacy notices. We may disclose information if the law requires it, or as part of a corporate transaction with notice to you.

We do not sell your personal information. We do not share it with advertisers. Ever.

Retention and deletion

We keep your Berri account and financial data while your account is active. After we accept an account-deletion request, we end active access and delete recoverable copies of that account and financial data that Berri controls within seven days. Service providers may retain limited authentication records or backups, communications, billing, legal, fraud-prevention, security, or independently controlled records for longer under their own deletion processes or applicable law. We restrict those records and do not use them to recreate a deleted Berri account. Saved conversations and financial context held by Berri are covered by this account-deletion process.

You can disconnect a financial institution to end ongoing synchronization. Disconnecting an institution, cancelling a subscription, and requesting account deletion are separate actions. To request deletion of your Berri account and its stored data, use the account-deletion control or contact us below.

Your rights

You can access, correct, export, or delete your personal information from your account settings or by emailing us. You may have additional statutory rights under applicable law, and we respond to valid requests through the process below.

Children

Berri is for adults. We do not knowingly collect data from anyone under 18.

Changes

If we change this policy in a meaningful way, we’ll notify you by email or in the product before the change takes effect.

Contact

Questions or requests: privacy@berri.sh.