Privacy Policy

Boscelli is a goal-based financial planning tool operated by PixOpus LLC (“PixOpus,” “we,” “us”). This policy explains what information Boscelli collects, how we store and use it, who can see it, and the choices you have. We built Boscelli to be privacy-first: you enter your own figures by hand, and we use them only to power the projections you ask for.

We collect only what we need to run the service:

• Account & identity. Your email and sign-in details, handled by our authentication provider (Clerk) so we never see or store your password.
• Goals. The named, dated goals you create — titles, target amounts, and target dates.
• Accounts you link to goals. An account name/label, its type and (optionally) institution, the balance you enter, your monthly contribution, and an expected rate of return. At most the last four digits of an account number, only if you choose to add them.
• Income & expenses. The cash-flow entries you add (description, amount, frequency) so projections reflect what you actually have to allocate.
• Household members. Optional labels (a name) you add to note who owns an account. These are labels only.
• Basic operational logs. Standard server logs needed to run and secure the application.

Every figure above is entered manually by you. Boscelli does not connect to your bank and does not import anything automatically.

By design, Boscelli never asks for or stores:

• Bank or brokerage login credentials.
• Full account numbers — only the last four digits, and only if you enter them.
• Transaction history or statements. There is no bank sync, Plaid, or aggregation.

Your data is encrypted in transit (HTTPS) and encrypted at rest by our database provider. The application is hosted on Vercel and your data is stored in a Supabase (PostgreSQL) database. We keep your data only as long as your account is active (see Data deletion).

Your data is scoped to your household and is not visible to other users. Only you (and anyone you explicitly share your login with) can see your plan. A small number of PixOpus operators may access data where strictly necessary to run, support, or secure the service.

We do not sell your data, and we do not share it with third parties for advertising. We use your planning data solely to compute and display your goal projections, status, and what-if scenarios — never to provide investment, tax, or financial advice.

Inside the app(once you're signed in), Boscelli uses essential cookies only: an authentication cookie (set by Clerk) to keep you signed in, and small functional cookies for first-run onboarding and your theme preference. The signed-in app carries no advertising, analytics, or cross-site tracking cookies — your planning data is never used for advertising.

On our public marketing pages (the pages you can visit without an account, including sign-up), we use Google Ads conversion measurement and Google Analytics, which may set advertising and analytics cookies. We use them only to understand how people find Boscelli and whether our own ads led to a visit or sign-up. In regions that require prior consent (the EEA, UK, and Switzerland), these cookies default to off.

We rely on a few reputable providers to run Boscelli. Each processes data only as needed to provide its service:

• Clerk — authentication and account management (email and login). Privacy policy.
• Supabase — the hosted PostgreSQL database that stores your plan. Privacy policy.
• Vercel — application hosting and delivery. Privacy policy.
• Google (Ads & Analytics) — conversion measurement and site analytics on our public marketing pages only, never inside the signed-in app; your planning data is never shared with Google. Privacy policy.

Boscelli is free while in beta, so there is currently no payment processor and we collect no billing information. If we introduce paid plans, we will update this policy and name the payment processor before collecting any payment details.

You can delete individual goals, accounts, cash-flow entries, and household members at any time from within the app. You can also delete your entire account and all associated datayourself from the Household page (“Danger zone”). For safety this uses a 30-day grace period: your account is scheduled for deletion and you can cancel any time within those 30 days, after which everything is permanently and irreversibly erased. You can also email us at support@boscelli.com to request deletion.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Questions about privacy? Reach us at support@boscelli.com.