Privacy policy

What our apps collect, why, who helps us run them, how long we keep it, and how to have it deleted.

Who we are

VZN Designs LLC (an Arizona limited liability company), called “VZN Designs”, “we” or “us” here, is the product and consulting business of Nuvi Njinimbam, based in Oakland, California. Questions about this policy or your information go to founder@vzndesigns.io.

What this policy covers

This policy covers this website (vzndesigns.io) and the web apps VZN Designs builds and runs: Command Center, VZN Money, VZN Apply, VZN Shop, VZN Travel, VZN Consulting and VZN Studio. Most of these apps are used by the founder and a small number of invited people. The Fightr training app has its own privacy policy, shown in that app.

Information we collect

• Account details. Your email address, used to send you a sign-in link and to identify your account.
• What you put in an app. For example tasks and notes, a resume and job preferences in VZN Apply, or trip and shopping plans.
• Tax documents you upload to the Command Center. Pay stubs, W-2s, 1099s and receipts, kept in private storage only you can open. We read the figures from them (income, withholding, deductions, totals and dates); Social Security numbers are masked and never stored with those figures. If you choose, receipts found in your Gmail are suggested with a link to the message and the merchant, date and total, not the email itself.
• Services you choose to connect. If you connect a Google account, the Command Center reads email and calendar details needed for your daily summary, with the permissions you approve on Google’s screen. If you connect a bank or brokerage, see the next section.
• Website messages. If you use the contact form, we receive your name, email address and message. If you book a call, the booking service collects what you enter there.
• Technical data. Our hosting providers record standard request logs (such as IP address, browser type and time) to run and protect the service. We do not use advertising or analytics trackers on this website. Your light or dark theme choice is stored only in your own browser.

Bank and brokerage accounts through Plaid

The Command Center lets its user connect bank and brokerage accounts through Plaid Inc. (“Plaid”), a service that connects apps to financial institutions.

• You sign in inside Plaid’s window. Your bank username and password go to Plaid and your bank, never to us.
• What we receive and keep: the institution name, account names and types, the last four digits of account numbers, balances, and investment holdings (security, quantity, cost basis, price and value). We do not store full account or routing numbers, and we cannot move money.
• Transactions, only if you turn on “Transactions for tax records”: for each bank or card transaction, its date, amount, merchant name, category and account, plus the tax tag you give it (business, personal deductible or not tax). Nothing else about a transaction is kept. Without that choice we store no transactions.
• Why: to show your balances and holdings in the Command Center and VZN Money and to answer questions you ask about them, and, if you turn it on, to keep categorized transactions as your tax records for your tax estimates and your accountant. Nothing else.
• Plaid’s role: Plaid collects and processes your financial information under its own policy. By connecting an account you agree to Plaid’s handling of your data as described in the Plaid End User Privacy Policy. You can see and manage the apps you have connected through Plaid at my.plaid.com.
• Access tokens that let us refresh your balances are stored encrypted in our database’s secrets vault and are used only by our server.
• Disconnecting: choose Remove on the institution in the app (or email us). We tell Plaid to end the connection and delete the stored token, balances, holdings and any transactions you haven’t tagged for that institution right away, and always within 24 hours of your request. For transactions you tagged as tax records, you choose: keep them, or delete everything.

How we use information

• To provide the features you use, such as your daily summary, money views, job application drafts or travel plans.
• To keep the apps secure, fix problems, and prevent misuse.
• To reply when you contact us.

We do not use your information for advertising, and we do not build profiles to sell.

We do not sell your information

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

Who helps us run the apps

We share information only with service providers that process it for us under contract, and only as needed:

• Supabase — database, sign-in and server functions (data stored in the United States).
• Netlify — website and app hosting.
• Plaid — bank and brokerage connections, as described above.
• Google — email and calendar, only if you connect your Google account; also our company email.
• Anthropic — AI features. When you use one (for example asking VZN Money about your portfolio, a Command Center summary, reading the figures from a tax document or receipt you upload, or VZN Apply drafting an application), the content it needs, which can include email snippets, resume details, balances, holdings and tax documents, is sent to Anthropic’s API to produce the result.
• Resend — sending sign-in emails and the reminder emails you turn on.
• Formspree and Cal.com — the website contact form and call booking.

We may also disclose information if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of the business, in which case this policy continues to apply.

How long we keep it

• Financial data from Plaid: balances and holdings only while the account stays connected; they are refreshed daily and replaced, not accumulated. Deleted right away when you disconnect, and within 24 hours of a request. A connection that stays broken for more than 90 days is removed.
• Transactions for tax records: the ones you tag business or personal deductible are kept 7 years after the end of their tax year, the longest period in the IRS’s record-keeping guidance, then deleted. Ones you don’t tag, or tag “not tax”, are deleted 18 months after their date, or when you disconnect the bank. You can delete any of them sooner in the app or by emailing us.
• Tax documents and entries you add: until you remove them in the app, or within 30 days of a deletion request.
• Account and app content: while your account is active. Deleted within 30 days of a deletion request.
• Backups: our database provider keeps daily backups for a limited window (currently 7 days). Deleted data disappears from backups when they expire.
• Website messages: kept while they are relevant to a conversation with you.

How we protect it

• All connections use encryption in transit (HTTPS/TLS). Data is encrypted at rest by our database provider, and access tokens are kept in an encrypted secrets vault.
• Every request is checked against your signed-in account, and database rules limit each person to their own records. Financial features are limited to the account owner.
• Administrative access is limited to the founder, and administrative accounts must use multi-factor authentication. Our code’s dependencies are monitored for known vulnerabilities, with fixes on a set schedule.

No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

Your choices and rights

• Access or copy: ask what we hold about you.
• Correct: fix information that is wrong.
• Delete: disconnect a financial account in the app at any time, or ask us to delete your account and data.
• Withdraw permission: disconnect Google or a bank in the app, at Google account permissions, or at my.plaid.com.

California residents have these rights under the CCPA, including the right to know, delete, correct, and not be discriminated against for using them. To make a request, email founder@vzndesigns.io from the address on your account. We will confirm it is you and respond within 45 days. You may use an authorized agent.

Children

These apps are not meant for children under 13, and we do not knowingly collect their information. If you think a child has given us information, email us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top. If a change materially affects how we use information you already gave us, we will tell you in the app or by email before it takes effect.

Contact

VZN Designs LLC (an Arizona limited liability company), Oakland, California · founder@vzndesigns.io