FORTESAN / PRIVACY
The current app stores your name, login email, password hash, plan, goals, financial activity, budgets, bills, tasks, manual holdings, subscriptions, debt balances, pricing assumptions, quotes, and messages. Registration also records your date of birth privately and the time you confirm your commitment. The fingerprint graphic is an interaction only: no biometric information is collected. Authorized staff can also store internal account notes and statuses.
Customers can access their own records. Authorized Fortesan staff can access client workspaces for support and account management. Authentication uses Supabase sessions stored in your browser.
The public site is hosted on Netlify, with a Surge preview also available. The workspace is hosted on fortesan.org with Supabase for authentication and database storage. Family and Business head accounts and Enterprise owners can see member names, emails and access history, but not private financial records. Shared plan access lasts while the head account has qualifying access. Members retain their own accounts and records when removed or when shared access ends. Enterprise requests store organization requirements, seat counts and quotes. Fonts load from Google Fonts. Use workspace Messages for questions about your information. Do not enter bank credentials, payment card details, or government identifiers.
About you can store optional household details, monthly income, expense estimates, goals, upcoming bills and reference notes in Supabase. These details are private to your login in the customer app; they are not included in staff or Enterprise owner views or automatically sent to NVIDIA. You can delete them from About you. Suggestions only enter your tools after you review and accept them; accepted records remain until you remove them separately.
Connections supports one-time CSV imports from bank, spreadsheet and accounting exports. The original file stays in your browser. Only accepted transaction fields and a source label are saved. Import fingerprints prevent duplicates; a minimal source and consent history is retained. Accepted Activity follows existing workspace permissions, including authorized Fortesan staff support access. If you explicitly share a monthly summary with the assistant, totals may include imported activity.
Live bank linking is not enabled yet. The prepared Plaid integration requests read-only account information, available balances and transaction history. It has no payment, transfer, trading or full account-number access. Bank sign-in occurs with Plaid or the institution; Fortesan does not store bank passwords. Provider tokens are encrypted on the server. When enabled, disconnecting revokes provider access and deletes cached bank accounts and transactions from Fortesan; accepted workspace records remain until removed separately. Plaid has its own privacy and retention terms. Other services do not gain access simply because you upload an exported file.
Plaid privacy information ↗The Fortesan assistant uses NVIDIA to generate responses. Your typed messages and recent conversation are sent to that provider. In customer suites, you can optionally share the selected month’s income, spending, category totals and entry count. This is off by default; names, individual records, internal notes and team messages are not automatically included.
Fortesan does not save conversation text in its database. The visible chat stays in memory until you start a new chat, switch suite or reload. NVIDIA processes requests under its own service and privacy terms. Daily request counters help prevent abuse; guest network identifiers are hashed with a daily salt. Counters older than two days are removed when the next assistant request is processed. Do not put passwords, identity documents or payment details in chat.
NVIDIA privacy policy ↗