Privacy Policy

This explains what HEAVENPATH collects, why, who it is shared with, and the choices you have. We don't sell your information and we don't run advertising or ad tracking.

What we collect

• Account: your email, optional name, and a salted hash of your password (we never store the password itself).
• Your businesses: the answers you give, research results, notes, and, if you enter them, your monthly revenue and costs. Without an account, all of this stays only in your browser. With an account, it is also saved to our database so it follows you between devices.
• Bank and card statements you analyze: the file is read inside your browser and is never uploaded. If you choose "use these as my monthly numbers", we save only averages (money in, money out and category totals). Your product list (names, prices, costs, units) is saved with the business.
• Billing: handled by Stripe. We receive your plan and subscription status. We never see or store your card number.
• Technical: standard server logs (like IP address and pages requested) kept by our hosting provider for security and reliability.
• Cookies: one strictly necessary cookie that keeps you signed in. No advertising or analytics cookies.

Who receives data, and why

• Hosting and database (Vercel, Upstash): run the service and store your account and saved businesses.
• AI provider (an inference provider running NVIDIA Nemotron models, or the provider named in the app): receives your business description, location and plan details so it can write explanations. Your revenue and cost numbers are not sent to the AI provider.
• Map and Census services (OpenStreetMap services, Data USA): receive the city and business type you ask about, to look up competitors and population figures.
• Stripe: payments and invoices. Resend: sends our emails (welcome, password reset, weekly market email).

We may disclose information if the law requires it, or to protect the service and its users.

Email

We email you to run your account (welcome, password reset, billing). If you're on a plan that includes the weekly market email, you'll get it only when something changed around your business, and you can turn it off in your account page at any time.

Your choices

• Delete any saved business, or your whole account, yourself from the account page. Deleting your account removes your account record and every saved business from our database.
• Data kept only on your device is yours to clear in your browser.
• Ask us for a copy of your data or anything else through the contact page.

Keeping it safe

Connections are encrypted, passwords are hashed with a modern algorithm, and sign-in attempts are rate-limited. No system is perfectly secure; if there is a breach that affects you we'll tell you as the law requires.

Children

HEAVENPATH is for adults running or starting businesses. It isn't meant for children under 18.

Changes

If we change this policy in a significant way we'll tell you before it takes effect.