Privacy and data retention
Last updated 17 September 2026
What TrakBuk stores
We store your name, email address, password hash, workspaces, account labels and last four account-number digits, imported transaction rows, statement reconciliation metadata, budgets, savings goals, cash entries, notification preferences, workspace membership, and security activity records.
Statements and financial data
Uploaded statement files are processed as temporary uploads and are not kept after parsing. Parsed transactions remain available until you remove the import, account, workspace, or customer account. TrakBuk does not store online-banking passwords or full account numbers.
How data is used
Your data is used to provide categorisation, spending insights, cash tracking, budgets, alerts, exports, and collaboration you request. We do not sell financial data. Automated insights are estimates and should be reviewed before making financial decisions.
Retention and deletion
Active financial records are retained while your customer account is active. Confirmed deletion enters a seven-day recovery period, after which the customer account and its financial records are permanently removed. Production security audit records should be retained for up to 12 months unless law requires otherwise.
Security and backups
Access is tenant- and workspace-scoped. Backups are encrypted and access-changing actions are audited without recording request bodies, passwords, transaction narrations, or account numbers. No service can promise absolute security; suspected incidents should be investigated and disclosed promptly.
Your choices
You can download an Excel copy of your data, turn optional financial emails off, remove imported data, revoke workspace access, or request customer-account deletion from Profile.
This product policy must be reviewed by qualified Nigerian privacy counsel before a public launch, including NDPA obligations and any sector-specific requirements.