Skip to content

Legal

Privacy policy

JamCash will keep the financial data you enter or sync so it can show it back to you, and use it for nothing else. It will not sell your data, show ads, or use it to train AI models. This site sets no cookies; it counts visits with PostHog in cookieless mode, and the waitlist stores your email, consent and how you found us.

Updated

Draft, not legal advice. This policy describes how JamCash works today and has not been reviewed by counsel. It must be reviewed before sign-up opens.

Who is responsible for my data?

JamCash is operated by Sanford Labs LLC, a single-member Michigan limited liability company, which is responsible for the data JamCash holds. Contact: michael@sanfordlabs.io.

What does the waitlist store?

When you join the waitlist, JamCash stores:

  • Your email address.
  • What you said you would use JamCash for, if you filled that in.
  • The page you joined from, and when.
  • How you first reached the site on that visit: the page you landed on, the site that linked you (its address without any query), and campaign tags such as utm_source if the link had them. These travel in the address bar from page to page, not in cookies or browser storage.
  • The time you agreed to be emailed, with the exact wording you agreed to and its version.

Your IP address is used only to stop abuse (a limit on how often one address can sign up) and is held in memory for ten minutes, not stored. If the form shows a Cloudflare Turnstile check, Cloudflare sees your IP address to tell people from bots, under its own privacy policy.

Your email address is never sent to PostHog, and joining does not link your analytics visit to you.

We use the waitlist only to email you about JamCash early access and launch. We never share it. To be removed, email michael@sanfordlabs.io and we will delete your entry.

What will JamCash store once I use it?

  • The accounts, transactions, categories, rules, budgets, goals, recurring items, holdings and credit score readings you enter or sync.
  • If you link a bank: the read-only SimpleFIN access link, encrypted with AES-256-GCM. Never your bank password.
  • API keys you create, stored as SHA-256 hashes, with their names, scopes and last-used times.
  • Server logs of requests, kept for operating and securing the service.

What will JamCash do with it?

Show it back to you, in the app and through the API and MCP tools you authorize. Nothing else. It will not be sold, shared for advertising, or used to train AI models.

Who else sees it?

SimpleFIN Bridge, if you link a bank, under its own privacy policy. AI assistants you connect see only what their API key's scopes allow, and only when they call JamCash.

Does this website track me?

jamcash.io counts visits with PostHog, in cookieless mode: it sets no cookies and stores nothing in your browser, so there is no cookie banner. It records the pages you view, the links and buttons you click, the page that sent you here, and your browser, device and approximate location. PostHog tells visits apart with a hash it computes on its servers, not an identifier stored on your device. Events go to jamcash.io first and are then passed to PostHog Cloud, which processes them for us under its own privacy policy. No advertising scripts run, and nothing is sold or shared for advertising.

The only other third-party script is Cloudflare Turnstile, on the waitlist form alone, when it is switched on.

How do I get my data or delete it?

Export transactions and reports to CSV from the app at any time. To delete your data, email michael@sanfordlabs.io.