Privacy Policy

Effective date: October 29, 2026

SHAUX is operated by BriskNest US LLC d/b/a SHAUX ("SHAUX," "we," "us"). This policy explains what information we collect when you use shaux.app, the SHAUX web app and the SHAUX Android app (together, the "Service"), and how we use it.

Information we collect

• Account information: your username, email address, display name and password (stored only as a secure hash). If you sign in with Google, Microsoft or Apple, we receive your name, email address and an account identifier from that provider.
• Tracker data: the entries, categories, budgets, clients and vendors, invoices, quotes, products, orders, receipts, logos and other content you add. We store it so we can run the Service for you.
• Billing information: PayPal or Stripe processes payments for paid plans. We receive your plan, subscription status and transaction references. We never receive or store your full card number.
• Usage and device data: IP address, browser and device type, pages and screens viewed, and actions in the app. We collect this through server logs and product analytics (see below).
• Messages: anything you send us by email at hello@shaux.app.

How we use information

• To provide, secure and maintain the Service, including sign-in, two-factor authentication, sharing and invoice delivery
• To process subscriptions and send service emails such as password resets, invites, receipts and invoice emails you send to your clients
• To understand how the Service is used so we can fix problems and improve it
• To prevent fraud and abuse, and to comply with legal obligations

Who can see your tracker data

Only you and the people you share a tracker with can see its entries, at the role you give them (Viewer, Uploader, Editor or Manager). Our administrators can see account-level details such as your username, email, plan and entry count, as needed to operate and support the Service. When you send an invoice or quote link, anyone who has the link can view that document.

Product analytics (PostHog)

We use PostHog, hosted in the United States, to understand how people use SHAUX. It tells us which pages and features are used, and where errors or slowdowns happen. PostHog records events such as page views, clicks and feature usage, plus technical details like browser, device and approximate location derived from your IP address. PostHog may also make session recordings of how the app is used. When you are signed in, events and recordings are linked to a pseudonymous account number and your plan, not your name or email. We set analytics to mask all on-screen text and form inputs, and to block images and receipts, so your amounts, entries and personal details are not captured. We use this information only to operate and improve SHAUX. We do not sell it or use it for third-party advertising. PostHog processes the data on our behalf under its own privacy policy at posthog.com/privacy. You can limit analytics by blocking cookies or using your browser's tracking protection, and the Service will still work.

Service providers

We use trusted providers to run the Service: GoDaddy (hosting and database), PayPal and Stripe (payments), Google, Microsoft and Apple (optional sign-in), and PostHog (product analytics). They process data on our behalf and only as needed to provide their services.

Cookies and local storage

We use a session cookie to keep you signed in and to protect against cross-site request forgery. We also use your browser's local storage for preferences such as dark mode. Analytics may set its own cookie or local storage entry.

Sharing

We do not sell your personal information. We share it only with the providers above, with people you choose to share a tracker or document with, when required by law, or to protect the rights and safety of our users and the Service.

Security and retention

Connections use HTTPS, passwords are hashed, and private files are stored outside the public web folder. We keep your data while your account is active. When you delete your account in the app, your account and the trackers you own are deleted right away. Requests sent by email are handled within 30 days. Security logs are deleted automatically within 30 days. We keep billing records only as long as the law requires.

Deleting your account

You can delete your account in the app under Settings, or follow the steps on our account deletion page.

Your rights

You can ask to access, correct, export or delete your personal information by emailing us. Depending on where you live (for example, under the Texas Data Privacy and Security Act, the GDPR or the UK GDPR), you may have additional rights. We will respond as required by applicable law.

Children

The Service is not directed to children under 13, and we do not knowingly collect their information.

Changes

We may update this policy. The effective date above shows when it last changed. If the changes are significant, we will let you know in the app or by email.

Contact

BriskNest US LLC d/b/a SHAUX · hello@shaux.app