Security

• Every connection to Feeno uses HTTPS (TLS), and so do our connections to the providers we rely on.
• The database and file storage are encrypted at rest by our hosting provider, Supabase.
• Passwords and secrets in saved logins, and the tokens for connected inboxes, are encrypted again with AES-256-GCM before they reach the database. The key is kept in the app's environment, never in the database, so a copy of the database alone doesn't reveal them. Each secret is tied to its own record, so it can't be copied to another one and read.

• Every table in the database has row-level security rules that let people read and change only the organizations they belong to, and only as their role allows. Automated tests check these rules for every table.
• Viewers can see an organization but change nothing, and can't see saved logins at all.
• Accountants can see and download an organization's expenses, invoices and services, but change nothing, and see neither saved logins nor the emails the inbox found.
• Uploaded invoices live in a private storage bucket and are served only to members of their organization.
• Invitation links expire after 7 days and work once.
• The people who run Feeno can see account and organization summaries to support you, but not saved secrets, and they look at your data only when you ask for help, for security, or when the law requires it.

• Gmail and Outlook are connected with read-only permissions. Feeno can't send, delete or change email.
• Only billing emails are read, and only the details of each receipt are stored, not the email itself (see the Privacy Policy).
• You choose which folders and senders are scanned, and can disconnect an inbox at any time.

• You sign in with Google, so Feeno never holds a password for your Feeno account.
• Sign-ins, inbox scans, AI reads and exports are rate limited to stop abuse.
• Card details are kept as a label only: brand, last four digits and expiry. When your browser fills in a full card number, it is cut to the last four digits on your device and never sent.
• Service logos are fetched by our server, which refuses private network addresses, so a logo request can't reach inside our infrastructure.
• Uploaded files are checked by their content, not their name, before they are accepted.

You can download everything you hold in Feeno, or delete your account and its data, from Settings at any time. Deleting an account removes its files and inbox connections and revokes inbox access.

If you find a vulnerability, please tell us at our contact address (listed here soon; until then, signed-in users can use Give feedback) with enough detail to reproduce it. We'll confirm we got it, keep you posted, and credit you if you like.

Please don't access or change other people's data, disrupt the service, or share the issue publicly before it's fixed. We won't take legal action over research done in good faith within these limits.