Privacy Policy

• Account information: Whop supplies your user identifier, email address, and display name when available. Razka records account creation and last-seen timestamps. Whop handles your password; Razka does not receive it.
• Information you enter: income and pay schedules, recurring expenses, budgets, savings and investing allocations, goals, manually recorded activity and notes, assets, debts, net-worth history, and preferences such as currency, region, and theme.
• Vehicle information: vehicle values and details you choose to save, which may include make, model, year, mileage, condition, region, and an optional VIN. Calculator inputs are used to produce estimates; Plus analysis sends the car scenarios to Razka’s server to compare them against your saved finances.
• Membership information: Razka checks your Whop membership to determine access to Plus, trial eligibility, renewal dates, and subscription-management links.

We use this information to save your plan, calculate spending and affordability estimates, show your own financial summaries, provide paid features, and keep sign-in working. The spending insights shown inside Razka are calculations from your financial entries, not visitor tracking.

Whop provides authentication, hosted checkout, membership verification, and website hosting. Plus checkout takes place on Whop. Razka’s own forms do not collect payment-card numbers, and Razka does not store them in its application database. Whop handles payment information under its own terms and privacy practices.

Saved financial planning data and account records are stored in a PostgreSQL database accessed using Neon’s serverless database client. The database’s physical storage region is not specified by the application. The current deployment is configured for a Cloudflare Workers runtime through Whop hosting.

The website loads fonts from Google Fonts, so your browser contacts Google to download them. The optional vehicle model lookup sends a make and year to the US National Highway Traffic Safety Administration (NHTSA) database; that lookup does not send your saved financial plan or VIN.

Service providers process information needed to deliver their services. Providers may process information outside your province or Canada, depending on their infrastructure; foreign laws may apply. We do not sell your personal information.

Provider information: Whop privacy policy, Neon privacy policy, Cloudflare privacy policy, and Google privacy policy.

• Sign-in cookie: the essential bs cookie holds a signed Razka session containing your user identifier and, when available, name and email. It lasts up to 30 days and is renewed during active use. It is marked Secure, HttpOnly, and SameSite=Lax.
• Temporary sign-in cookies: oauth_return, oauth_verifier, oauth_state, and oauth_nonce support the Whop sign-in flow. They expire after 10 minutes and are cleared when the callback is handled.
• Theme preference: local storage under bankshot-theme remembers a selected light or dark theme. You can remove it by clearing site storage. It has no automatic expiry.

The current Razka application has no integrated advertising pixel or third-party product-analytics SDK. Its server reports operational errors, such as sign-in, storage, and membership-check failures. Hosting and payment providers may keep their own technical request or transaction records under their own policies.

You can clear or block cookies in your browser; blocking essential cookies prevents sign-in. Whop’s own pages and Google’s font service are separate services with their own privacy practices.

Bank account syncing is not live. The current app uses financial information you enter manually and does not connect to your bank or import bank transactions automatically. Razka does not ask for bank login credentials.

Future update: if bank syncing launches, we will use a third-party provider, update this policy first to explain that provider and the information involved, and ask for your consent before connecting any account. No bank-data provider is currently active.

• Export: in Settings → Your data, “Export my data” downloads your saved planning data as a JSON file and is available on Free. Plus also provides CSV activity exports in Settings and CSV exports through Insights. These files are not a complete copy of Whop’s account or payment records.
• Clear planning data: Settings → Your data → “Delete all my data” resets the financial plan and returns you to setup after the change saves. It preserves your theme preference. It does not delete the separate account identity record, your Whop account, or your subscription.
• Full account deletion: a self-service control for deleting the complete Razka account and identity record has not been built. Contact spenzoadmin@gmail.com to request deletion or ask about information not included in an export. We may need to verify your identity before handling a request.

Cancel a paid subscription separately through the Whop management link in Settings → Plan or your Whop account. Clearing planning data or signing out does not cancel billing.

Read our approved Data Retention and Deletion Policy for current controls, deletion limitations, provider-held records, and planned bank-data handling.

Planning data remains in your account until you change or clear it. Account identity records are stored separately and are not removed by the planning-data reset. The current app has no automatic full-account deletion schedule.

When the planning-data reset saves successfully, the app replaces your current financial plan and removes the previous income, expense, paycheck, goal, asset, debt, activity, and net-worth-history rows from its active database tables. A default profile and your separate account identity record remain. This is not a promise of immediate removal from provider backups or logs: their retention periods are not specified in the application. Contact us to request complete deletion and information about any records that must remain for legal or accounting reasons.

Requests for saved planning data are scoped to the signed-in user. Sign-in sessions are signed, and browser session cookies are not readable by page scripts. These safeguards do not eliminate all security risks; avoid putting bank passwords, card numbers, or identity documents in activity notes or support messages.

Where the Personal Information Protection and Electronic Documents Act (PIPEDA) applies, you can request access to personal information, ask for corrections or deletion where applicable, ask about its use and disclosure, challenge our privacy practices, and withdraw consent subject to legal or contractual limits. Withdrawing information required to operate your account may prevent us from providing the service.

If you are in Quebec and Quebec’s private-sector privacy law, as amended by Law 25, applies, additional rights may include access, rectification, withdrawal of consent, and obtaining eligible computerized personal information in a structured, commonly used technological format, subject to applicable legal conditions. You may also request information about processing outside Quebec and raise a privacy complaint.

Send privacy requests or complaints to spenzoadmin@gmail.com, for the attention of Nicolas Abdo, the person responsible for the protection of personal information at Razka. Describe your concern and the response you are seeking; we may verify your identity to protect your account. You may also contact the Office of the Privacy Commissioner of Canada or, where applicable, Quebec’s Commission d’accès à l’information du Québec. Nothing in this policy limits rights provided by applicable law.

Where the GDPR or UK GDPR applies, you may request access, correction, erasure, restriction of processing, or a portable copy of your personal information, object to processing where applicable, and withdraw consent where processing relies on it. These rights are subject to the conditions and exceptions in those laws.

We use account and planning information to provide the service you request, and essential session information to operate and secure it. Where applicable, these activities rely on performance of our agreement with you and legitimate interests in operating and securing the service. We seek consent where required for any additional processing. These grounds do not remove your rights.

To make a request, contact spenzoadmin@gmail.com. You may also complain to your local data protection authority or the UK Information Commissioner’s Office. Our providers may process information outside the EU or UK; contact us for details about applicable transfer arrangements. This policy does not claim that information is stored exclusively in your country.

We will update this page when our data practices change and revise the “Last updated” date. Material new data uses, including bank syncing, require an updated explanation and any consent required by law. For questions, visit Contact.