Privacy Notice

Last updated September 19, 2026

Who controls your data

COAB Solution private limited, trading as AiTM, is the legal seller and data controller responsible for personal data processed through AiTM.

Account details from your Google sign-in: your name, email address, and profile picture.
If you use email and password sign-in, we process your email address and secure authentication information needed to operate your account.
The transactions you log: merchant, amount, category, type, date, and the original sentence you typed. Voice recordings and uploaded bills are processed to extract transactions and are not retained by AiTM.
Your preferences, such as your default currency.
Service and security information, including device details, IP address, usage events, error reports, and support messages.

To show your transactions, analytics, and exports back to you.
To turn the text, voice, receipts, or bills you provide into structured transactions using an AI model. These inputs are sent to our AI provider solely to perform that extraction; AiTM does not retain uploaded media.
To keep the service secure and prevent abuse, including basic rate limiting.

Your data is stored in an encrypted, access-controlled database. Row-level security rules mean your records can only ever be read by your own signed-in account.
We never see or store your banking credentials. AiTM has no connection to your bank.

We do not sell your data. We do not share it with advertisers.
We share necessary data with hosting, authentication, analytics, support, and AI service providers acting as processors; professional advisers and authorities may receive data when required by law.
Paddle is our Merchant of Record and separately processes sale, subscription, payment, tax, and invoice information.

We process account, transaction, subscription, and support data because it is necessary to perform our contract with you and provide AiTM.
We rely on our legitimate interests to secure the service, prevent fraud, diagnose errors, and improve AiTM. We rely on consent for optional communications or optional cookies, and on legal obligations where records must be kept by law.

Account and transaction data is retained while your account remains open. When you delete your account, active copies are deleted promptly and residual encrypted backups are removed within 30 days.
Security and diagnostic logs are normally retained for up to 90 days. Support messages are retained for up to two years after the request is closed. Records needed for tax, accounting, fraud prevention, or legal claims may be retained for up to seven years where required by law.
Paddle keeps billing and transaction records under its own privacy and legal retention obligations as Merchant of Record.

Where data is transferred outside the UK or EEA, we use recognized safeguards such as adequacy decisions or standard contractual clauses.
We use appropriate technical and organizational safeguards, including encryption, access controls, and account-scoped database rules.

You can export everything you have logged as a CSV file at any time from the Export screen.
You can permanently delete your account and every transaction attached to it from the Settings screen. Deletion is immediate and cannot be undone.
Depending on your location, you may request access, correction, erasure, restriction, portability, or object to processing; withdraw consent; and complain to your supervisory authority. We aim to respond within one month where GDPR applies.

AiTM uses essential browser storage for sign-in, security, and preferences. We do not currently use advertising cookies. If optional analytics or marketing cookies are introduced, consent controls will be provided where required.

Questions about privacy? Reach us through the contact address listed on our site.