Data Processing & Subprocessors

Running Back in Black takes a small crew of infrastructure providers: subprocessors, in legal terms. Each one sees only what its job requires, nothing more. This page is the living list: if a provider is ever added or swapped, this page and its date change first. The promises in the Privacy Policy don't depend on who's on this list. They hold regardless.

AI analysis: currently Anthropic (Claude)

Powers the spending analysis and automatic categorization. Sees transaction lines (merchant names, amounts, dates, category labels) and the questions you type to the Phoenix. Never sees your name, your email, or your account identifiers; that boundary is enforced by an automated test in our own codebase, not just a sentence on this page. Your data is processed to answer the request and is not used to train models. Read the Anthropic Privacy Policy.

Bank connections: Plaid

Handles linking your bank. Your bank credentials go to Plaid directly. They never touch our servers. Plaid hands us balances and transactions for the accounts you connect. Read the Plaid End User Privacy Policy.

Database: Neon (a Databricks company)

Hosts the Postgres database where your ledger lives. Everything sensitive follows the rules in the Privacy Policy. Bank access tokens, for one, are stored encrypted (AES-256-GCM) even at rest. Read the Databricks Privacy Notice.

Application hosting: Vercel

Runs the app itself and, like any host, handles the traffic needed to serve it. Read the Vercel Privacy Notice.

That's the whole list

No advertisers, no data brokers, no one else. Questions about any of these? Ask, via the About page. Straight questions get straight answers.