Security and privacy, in plain words.

• Encrypted in transit and at rest
• Your data is isolated to your account
• Export or delete everything, any time
• We are not a CPA, and we say so everywhere it matters

Statements, receipts, and documents are stored encrypted at rest in private storage with no public download links, and every connection to OneTally is encrypted in transit. Your records and your files are protected by row-level security tied to your account, so one account’s data is not reachable by another. When OneTally needs to open one of your files, it does so server-side with a short-lived, single-purpose link.

When you upload a statement or receipt, OneTally sends the document to Anthropic’s Claude to read the lines and sort them into your books. On every AI call, it also sends a short working context about you: a plain-language summary of your financial setup, recent entries from your memory log, and any rules you have stated. That context is what makes the categories right for your finances instead of generic, and you can view, edit, or empty it at any time.

Anthropic does not use data sent through its commercial API to train its models, so your documents and transactions are not used to improve any AI model. Anthropic keeps API inputs and outputs for a limited period, currently about 30 days, for abuse monitoring, and then deletes them.

OneTally never stores a full Social Security number. When a document you upload contains one, it is detected and masked before saving, keeping at most the last four digits. Be aware that to read a document at all, OneTally transmits it to Claude as you uploaded it, so a tax form may still contain a number at that moment. If you would rather a document not be processed that way, do not upload it.

You can download everything you have ever put into OneTally: one JSON archive of your records and metadata, with time-limited download links for every file you have uploaded, statements, receipts, and past exports included. You can delete your account at any time; deletion starts a 30-day grace period so you can still cancel, then removes your data permanently, stored files included. After that hard delete, recovery is not possible.

We never ask for your bank username or password. We never sell your data. We never show ads. No third-party ad trackers and no session recording: the only telemetry is privacy-scrubbed, first-party product analytics and error monitoring, and neither ever sees your transactions, amounts, or file names.

OneTally is not a CPA, tax preparer, or financial advisor, and it is built to make that a strength: it does the organizing so a qualified professional can do the advising, faster and with better inputs. OneTally is US-only at launch.

Write to hello@onetally.app. A person reads it.