Rendra

Privacy

Draft policy. This is a working draft of how Rendra handles your data. The final policy will be reviewed by Australian legal counsel before a public launch. The current export and deletion limitations are described below. This draft is not a statement of regulatory approval.

Plain-English summary of what Rendra holds about you, where it lives, who else sees it, and how you delete it.

What we hold

  • Your email and securely hashed password (in Supabase Auth), your profile, notification preferences and optional two-factor authentication setup.
  • Basiq is the bank-connection provider being prepared for Rendra. Enabled connections use Rendra's server-side application credential and a provider identity created with your verified email. Authenticate directly through the provider or bank flow; do not give bank passwords or security codes to Rendra.
  • Bank-derived data imported through your enabled provider: account names, balances, transactions (date / amount / merchant / category), institution names.
  • Household-supplied data: goals, property value, mortgage details, life-plan scenarios, documents you upload to your vault, conversations with Claude and facts saved from those conversations.
  • An append-only audit log of sensitive actions (re-auth, key changes, member invites/removals).

Where it lives

Supabase Postgres in Sydney (ap-southeast-2). Storage for documents is the same project (private bucket, RLS-gated).

Who else sees it

You can use Rendra on your own. If you share a household, its members can see the financial information, documents and conversations in that household. Labelling an account with a person's name does not make it private from other members.

Sub-processors:

  • Supabase (US-incorporated, AU-region) — auth + database + storage.
  • Vercel (US) — application hosting + build.
  • Basiq — hosted bank consent and account/transaction data for enabled connections. Live-bank access is subject to production approval and configuration. See our bank-sharing guide for import and withdrawal controls. The initial live-bank pilot blocks bank-data AI analysis and automatic derived reporting; uploaded documents retain their separately disclosed processing below.
  • Anthropic (US) — the AI advisor calls Claude to answer your questions, analyse financial patterns and extract uploaded documents. Inputs can include messages, saved facts, financial details, document contents and tool results. The main banking tools omit raw transaction-description fields, but messages and uploaded statements can still contain that information. Do not put information into these features that you do not want processed by Anthropic.
  • Resend (US) — the application email provider for optional weekly digests and recovery codes, when configured. Supabase Auth separately handles signup, invitation and password-reset emails.
  • Upstash (US) — rate-limit counters and keys that can contain account identifiers or request IP addresses.

Legacy bank connections: BankSync is not the connection option offered to new households. Earlier households may have used BankSync.io, whose Australian service describes a representative arrangement with Fiskil. Legacy support remains in Rendra; where an existing connection is still configured, its household API key is encrypted at rest and that provider handles the related consent and bank data. This does not establish Rendra's regulatory status.

How we use it

Only to run the product for you. We don't sell your data or share it with anyone outside the list above. We don't use your transactions to train AI models.

Your rights

Owners can request a JSON export from Settings → Your data. The current export includes selected household records and document metadata, not document files. Oversized or failed exports return an error rather than a partial file. Complete export coverage remains a launch requirement.

Delete household removes the household database records and signs you out. It does not currently delete your sign-in account, remove uploaded files from storage or withdraw consent at your bank-data provider. Withdraw Basiq sharing from Bank connections before deleting the household, or manage consent directly with your provider or bank. A complete account deletion process is required before public launch.

Contact

Questions or complaints: write to privacy@rendra.com.au.

Last updated 2026-10-13.