Privacy

Nothing But Assets is a personal finance clarity app operated by Dressmor, LLC, based in Renton, Washington, USA. Dressmor, LLC is the controller of personal data processed for the Service.

Privacy contact (primary): Contact@aireadyhub.tech. You may also use privacy@aireadyhub.tech if that alias is configured; we still treat Contact@aireadyhub.tech as the primary address.

We are not a brokerage, bank, or investment adviser. Nothing on this site is financial, legal, or tax advice.

When you create an account, we store your email address, name (if you provide one), a hashed password, your plan (Free or Pro), and — if you subscribe — a Stripe customer id. We also store expenses and related budget data you enter in the app.

Card payments for Pro are processed by Stripe. We do not store full card numbers on our servers. Stripe may retain payment details according to its own policies so we can manage subscriptions and billing. Stripe Tax may apply at checkout depending on location and our tax settings.

Today, bank and brokerage linking runs in Plaid’s sandbox environment only — test institutions and sandbox credentials, not live production bank connections. Moving to real-bank linking requires Plaid production approval and an environment switch later.

Linking uses Plaid Link and is read-only: balances and account metadata. We never ask you to type your bank password into Nothing But Assets forms. Credentials for linking are entered in Plaid’s flow, not ours.

To show your linked accounts, we may store Plaid access tokens and account metadata (institution name, account names, masks, types, and balances). You can disconnect an institution from Connect; that removes the item from our database and attempts to revoke it with Plaid. Deleting your account also attempts to revoke linked items.

Plaid is a subprocessor for this feature. Their practices are described in Plaid’s own privacy materials.

The service is hosted on Vercel. Application data is stored in Postgres (Neon). These providers process data as needed to run and protect the product.

If you use links on our Partners page, click or referral tracking may be handled by Impact.com (our affiliate network) and the partner’s own systems. Those parties may receive technical click data (for example timestamps, referral identifiers, and approximate location derived from IP) according to their policies. We may earn a commission; that does not change what you pay the partner.

Google AdSense is not currently loaded on the site. If we enable advertising later, we will only do so behind an explicit configuration flag and — for EU/EEA/UK visitors — with an appropriate consent mechanism (CMP) before non-essential ads run. Until then, non-essential advertising cookies are off.

Short cookie notice: we use essential cookies to keep you signed in. Optional advertising cookies are not loaded today. We do not run a full cookie consent banner yet because non-essential trackers stay off.

If you are in the European Union, European Economic Area, or United Kingdom, and those data-protection laws apply to our processing of your personal data, we rely on the following bases as appropriate:

• Contract — to provide the account, dashboard, billing, and features you request
• Legitimate interests — security, fraud prevention, product improvement, and affiliate attribution where balanced against your rights
• Consent — where required (for example optional advertising cookies if we enable them later)
• Legal obligation — where we must retain or disclose information under law

Depending on where you live, you may have rights to access, rectify, erase, restrict, or port your personal data; to object to certain processing; and to lodge a complaint with a supervisory authority (for EU/EEA/UK residents, your local data-protection authority).

How to exercise rights: email Contact@aireadyhub.tech, or use Settings → Your data in the app to download a copy of your data or delete your account when signed in. We may need to verify your identity before fulfilling a request.

We are based in the United States. Personal data is processed in the US (and may be processed by vendors in the US or other countries). When EU/UK (or similar) transfer rules apply, we rely on appropriate safeguards such as vendor contractual terms (for example standard contractual clauses or equivalent terms offered by our processors). This is honest draft language — formal transfer assessments remain an operational follow-up.

We keep account and app data while your account is active. When you delete your account in Settings (or request deletion by email), we remove your user profile, expenses, and linked Plaid items from our application database, and we attempt to revoke Plaid items so access tokens are not left orphaned. Stripe may retain invoices and payment records according to Stripe’s retention and legal requirements. Operational backups, if any, are kept only for a limited time and then overwritten.

Disconnecting a linked institution removes that linked item and its accounts from our records (and attempts removal at Plaid) without deleting your whole account.

We do not sell your personal data. We share data with processors only as needed to operate the service — for example Stripe (payments), Plaid (account linking), Impact.com (affiliate click tracking when you use Partners links), and our hosting and database providers (Vercel, Neon).

We are US-based and do not currently geo-block visitors from the EU, EEA, or UK. If you are in those regions, the rights and legal-bases language above applies when those laws cover our processing. Contact us to exercise your rights. Non-essential advertising tracking remains off until we enable it with an explicit flag and appropriate consent tooling.

Traffic to the site uses HTTPS. Passwords are stored hashed, not in plaintext. Plaid access tokens are stored so we can provide the linking feature.

We intend further hardening for production — for example encrypting sensitive tokens at rest — as the product matures. No system is perfectly secure; contact us if you believe you have found a vulnerability.

Nothing But Assets is not directed at children under 13, and we do not knowingly collect personal information from children under 13. The Service requires users to be 18+ (or legal majority). See our Terms of Service.

We may update this page from time to time. When we do, we will revise the “Last updated” date below. Continued use of the service after changes means you acknowledge the updated notice.

Questions about privacy or data requests: Contact@aireadyhub.tech. Controller: Dressmor, LLC — Renton, Washington, USA.