Privacy Policy

Last updated: March 25, 2026

SaveLock ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service at getsavelock.com.

🔒 Your bank account details are encrypted on your own device using AES-256-GCM encryption before they ever reach our servers. SaveLock staff cannot read your account or routing numbers — ever.

1. Information We Collect

We collect only the minimum information needed to provide the service:

Account information: Your name, email address, and a securely hashed password (we never store your password in plain text).
Savings lock data: Lock names, unlock dates, and balance amounts you enter.
Encrypted bank data: Bank name, account type, and the last 4 digits of your account number are stored in readable form. Your full routing and account numbers are stored only as encrypted ciphertext that cannot be decrypted by our systems.
Billing information: Subscription and payment data is handled entirely by Stripe. We store only your Stripe customer ID — no card details ever touch our servers.

2. How We Use Your Information

To provide and maintain the SaveLock service
To process your subscription payments via Stripe
To send service-related emails (e.g. password resets, billing receipts)
To improve and secure the application

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Encryption & Security

SaveLock uses AES-256-GCM encryption, the same standard used by banks and governments worldwide. Your bank account details are encrypted in your browser before being transmitted. The encryption key is stored only in your browser session — SaveLock never has access to it. This means:

Your full account and routing numbers cannot be read by SaveLock employees
Even in the unlikely event of a data breach, your sensitive banking details remain unreadable
Only you can decrypt your data, and only during your active session

4. Third-Party Services

Stripe: Used for subscription billing. Stripe is PCI DSS Level 1 certified. See Stripe's Privacy Policy.
Replit: Our hosting provider. See Replit's Privacy Policy.

5. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us. Upon deletion, all your locks, bank account records, and personal information will be permanently removed from our systems.

6. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Cancel your subscription at any time through your billing portal

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at: privacy@getsavelock.com