Legal
Privacy policy
Effective and last updated August 16, 2026
Gasti is provided by SaaSpero, LLC. This policy explains what Gasti collects, why it is used, where it is stored, and the choices available to you.
Information you provide
Gasti may process your account email and display name; budgets, transactions, categories, notes, and household membership; receipt images, statement files, voice input, and chat requests you choose to provide; the compact budget facts needed for a Frontier AI request you enable; subscription status and store product identifiers; and support or privacy requests you send us.
Connected financial accounts
If you connect an eligible bank, Gasti uses the provider named before you continue, such as Plaid, Fintoc, or Belvo. The provider returns the account metadata, balances, and transactions you authorize. Gasti never receives or stores your bank password, initiates payments, makes credit decisions, or uses Plaid data as a consumer report. Connection is optional and requires affirmative consent and device authentication.
How information is used
We use information only to provide the features you request: recording and categorizing transactions; creating individual or household budgets; showing balances, cash-flow analysis, search results, and insights; operating private financial chat; syncing selected shared data; preventing abuse; securing and supporting the service; and complying with law. We do not sell personal information, share it for cross-context behavioral advertising, or use consumer financial data to train a general-purpose model.
Sharing and service providers
Information is shared only as needed with vendors that operate a feature you choose, including Supabase for authentication, encrypted US-hosted storage, and server functions; RevenueCat and Apple or Google to sell, restore, and verify a membership; OpenAI for Frontier AI conversations included in an eligible plan; Plaid, Fintoc, or Belvo for an enabled bank connection; and Apple or Google for sign-in you choose. Frontier AI receives the current message, recent chat, and compact facts from the selected budget—not raw audio, receipt images, private notes, or another budget space. RevenueCat receives your Gasti account identifier and purchase status, not your ledger. Household data is visible only to members under the owner, editor, or viewer permissions shown in Gasti. We may disclose information when legally required or necessary to protect users and the service.
Storage and security
Server data is stored in the United States. Data uses TLS 1.2 or better in transit and encryption at rest. Bank-provider credentials are separately encrypted and unavailable to the mobile client. Local financial and authentication data is encrypted with keys protected by the device Keychain or Keystore. Access is restricted by authenticated sessions, multi-factor authentication, and row-level authorization. No security program can guarantee absolute security; we provide incident notice when required by law.
Retention and deletion
We keep identifiable information only while needed to provide Gasti or meet a documented security, billing, or legal obligation. You can disconnect a bank or delete your account in the app. Account deletion does not cancel an App Store or Google Play subscription; cancel it in store settings. Disconnection revokes provider access and deletes stored credentials and account summaries. Soft-deleted transactions are purged after 30 days, temporary connection artifacts after 24 hours or 30 days by type, operational logs after 90 days, and audit events after 12 months unless a documented legal or security hold applies. Purchase records may remain with Apple, Google, and RevenueCat as required for transaction integrity, tax, fraud prevention, and restoration. Provider-managed encrypted backups expire under the provider's backup lifecycle and are not restored for ordinary use after verified deletion.
Your choices and rights
You can use Gasti without connecting a bank; choose local-only features; review transactions before saving; export your data; disconnect providers; leave household budgets subject to owner rules; correct or delete transactions; and delete your account. Depending on where you live, you may also have rights to access, correct, delete, restrict, or obtain a portable copy of personal data and to appeal a denied request.
Children
Gasti is not directed to people under 18, and we do not knowingly connect financial accounts for children.
Changes
Material changes will be announced in Gasti before they apply. The effective date below identifies the current version.
SaaSpero, LLC
1111B S Governors Ave, STE 26326
Dover, Delaware 19904, United States