Concepts

Security & privacy

What we encrypt, what we never store, and how to delete everything.

Encryption

• TLS 1.3 in transit.
• AES-256 at rest (Postgres + storage).
• Row-level security on every table.
• Service-role keys server-only, rotated whenever one may have leaked.

What we never store

• Bank login credentials. Trove has no bank connection at all.
• Credit card numbers. There is no billing during the testing phase.
• Full payment account numbers. Only last-4 masks.

Deleting your data

/settings → Delete account. Deletion is immediate: your profile, finance data, receipts and uploaded documents go at once. No confirmation email is sent. A database backup taken by hand before then may still hold your data until that backup is deleted. The security log keeps a record of the deletion, with your email address.

Reporting a vulnerability

[email protected]. Trove is run by one person, so there is no promised response time; reports are read as they arrive, and researchers are credited if they wish.