Privacy Policy

Last updated July 28, 2026

Our Privacy Promise in One Sentence

We don't have your data, so we can't sell it, share it, lose it, or hand it over.

What BalVault Stores

BalVault is desktop software that runs entirely on your computer. It stores two things locally: your SimpleFIN setup token in a SQLite database on your PC, and your account balances in a CSV file you specify. That's it. Nothing is uploaded to BalVault servers because we don't operate servers that collect or store your financial data.

What BalVault Does Not Do

BalVault never phones home. There is no telemetry, no analytics, no usage tracking, and no crash reporting. The application does not send any data to BalVault — not your balances, not your account names, not your SimpleFIN token, not your system information. The only network connection it makes is directly to SimpleFIN's API to fetch your current balances, using the token you provided.

Your SimpleFIN Setup Token

To fetch balances, BalVault needs a SimpleFIN setup token. You obtain this token from bridge.simplefin.org. BalVault stores it in a local SQLite database on your PC. The token is only ever transmitted from BalVault to SimpleFIN's API — it is never sent to BalVault or any other third party. You can revoke this token at any time through your SimpleFIN account.

Your CSV Data

BalVault writes your account balances to a CSV file on your computer, at a location you choose. This file is never uploaded, transmitted, or accessed by BalVault. You control where it lives and who has access to it.

This Marketing Website

The website you're reading right now (balvault.corporateapex.com) does not use tracking cookies, analytics scripts, or advertising pixels. The only cookies that may be set are those required by Cloudflare (our hosting provider) and Stripe (our payment processor) to function — for example, Stripe uses a cookie during checkout to prevent fraud. We do not use these cookies for tracking or analytics.

Contact Form

When you submit a message through our support page, your message is delivered to us via MailChannels, an email delivery service integrated with Cloudflare. We use your contact information solely to respond to your inquiry. We do not add you to a mailing list, send marketing emails, or share your contact details with anyone else.

Payment Processing

Payments for BalVault are processed by Stripe. When you purchase a license, you interact directly with Stripe's secure checkout. BalVault does not receive or store your credit card number or full payment details. Stripe's use of your personal information is governed by their own privacy policy.

Third-Party Services

BalVault depends on three third-party services, each with their own privacy practices: SimpleFIN Bridge (bank account aggregation — bridge.simplefin.org), Stripe (payment processing — stripe.com), and MailChannels via Cloudflare (email delivery for contact form submissions). We encourage you to review their respective privacy policies to understand how they handle your information.

Data We Don't Have

Because all your financial data remains on your computer, BalVault cannot access it, cannot disclose it in response to legal requests, and cannot lose it in a data breach. We have no database of user balances, no server logs of your financial activity, and no backup of your SimpleFIN token. If you lose your token or CSV file, we cannot recover it for you — because we never had it.

Children's Privacy

BalVault is not directed at children under 13, and we do not knowingly collect personal information from children. Since BalVault collects no personal information at all, this is largely academic — but we state it for completeness.

Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we'll note them here with an updated date. Since we don't have your email address or any way to contact you, please check this page occasionally.

Contact Us

If you have questions about this privacy policy or how your data is handled, reach out through our support page. We'll respond within 24 hours.