frugr is operated by Tent City Technologies (“we”, “us”). This policy describes how we collect, use, and share information when you use frugr for bookkeeping and financial reporting.
Information we collect
- Account data — name, email, organization membership, and authentication credentials (managed via Better Auth).
- Bookkeeping data — clients, invoices, expenses, categories, vendors, bills, time entries, and other records you enter or import.
- Bank connection data — when you connect an account through Plaid, we receive account names, masks, balances, and transaction details authorized by you. We do not store your bank login credentials; Plaid handles authentication with your institution.
- Usage and security logs — request metadata and audit events for security and support. Logs are sanitized and must not contain Plaid access tokens or full account numbers.
How we use information
We use your data to provide bookkeeping features (import, categorization, reconciliation, reporting, invoicing, and payments), to secure the service, and to comply with legal obligations. We do not sell your personal or financial data.
Who can access your data
frugr is multi-tenant: data belongs to your organization (company). Members of that organization with appropriate roles (owner, admin, accountant, etc.) can access the organization’s records. Our staff may access data only when necessary for support, security, or legal compliance.
Bank data via Plaid
When you choose to connect a bank account, you are redirected to Plaid Link. By continuing, you authorize frugr to access the account information Plaid makes available for the products you enable (such as Transactions and Balance). You can disconnect at any time from Bank connections; we revoke Plaid access tokens when you disconnect or close your account.
Plaid’s privacy policy applies to their collection and use of data during Link: Plaid End User Privacy Policy.
Subprocessors
We use trusted providers to run frugr. They process data only to provide their service to us:
- Plaid — bank account connection and transaction data
- Neon — PostgreSQL database hosting
- Vercel — application hosting and edge delivery
- Resend — transactional email (invitations, password reset, invoice delivery)
- Stripe — online invoice payments (when enabled)
Retention and deletion
We retain data for as long as your account is active and as described in our Data retention & deletion policy. You may request deletion of your account or connected bank data by contacting privacy@hoagsmedia.com.
Security
We use HTTPS in transit, encrypt Plaid access tokens at rest, require two-factor authentication before bank connection in production, and follow our internal information security policies.
Contact
Questions about this policy: privacy@hoagsmedia.com
Security contact: Joshua Hoagland, CEO — josh@hoagsmedia.com