Privacy Policy

Liftoff Cash (“Liftoff,” “we,” “us,” or “our”) provides tools that help people create and review household cash-flow plans. This Privacy Policy explains what information we collect, why we use it, how we protect it, and the choices available to you.

Information we collect

Account information

When you create an account, we collect your email address and authentication information. Passwords are stored as salted cryptographic hashes, not as readable passwords. If you sign in with Google, we receive your verified email address and a Google account identifier.

Plan and workbook information

We collect the information you enter to build and review a plan, which may include income amounts and dates, missing or delayed deposits, split deposits, bonuses, reimbursements, account balances, bills, payment methods, grocery budgets, actual grocery purchases or refunds, bill and obligation payment outcomes or notes, transfers, unplanned income or expenses, savings preferences, plan names, pay-period review timing, and payday reminder preferences. We also create annual-plan data, pay-period projections and status records, in-app notification states, workbook previews, validation results, and downloadable workbook files from that information.

Connected financial data

Connected accounts are not available yet. A future read-only pilot will request transaction access only. If you opt in, Liftoff may store an encrypted provider connection reference, transaction dates, amounts, merchant descriptions, categories you review, and synchronization status to compare activity with your plan. Liftoff will not store your online-banking username or password, full account number, or permission to move money. You will be able to disconnect an account and delete its imported transactions.

Cookies and technical information

We use essential first-party cookies only. The secure session cookie keeps you signed in for up to 30 days. The liftoff_cookie_notice cookie remembers for up to 180 days that you acknowledged our cookie notice. These cookies are restricted to the hostname that set them and are not used for advertising, analytics, or cross-site tracking. We may also process standard server information needed to operate and secure the service, such as request timing, error type, and network or device information supplied with a request. We do not currently use advertising cookies, analytics pixels, or session-replay tools.

How we use information

• Authenticate accounts and maintain secure sessions.
• Save drafts and generate, validate, display, download, restore, and export cash-flow plans.
• Provide support, investigate failures, protect accounts, and improve reliability.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell personal information, use financial plan information for advertising, or initiate payments or transfers.

Google data and Google Sheets export

Google Sign-In provides only the identity information needed to authenticate your account. If you separately connect Google Drive, Liftoff requests limited permission to create a Google Sheet from a workbook when you choose Export to Google Sheets. We do not use that permission to browse or analyze unrelated files in your Drive.

Google access and refresh tokens are encrypted before storage. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

How information is shared

We share information only as needed to operate the service, at your direction, or when legally required. Service providers may process data for hosting, database, network, security, email, or Google integration functions. When you export to Google Sheets, the selected workbook is sent to Google at your request and is then governed by your Google account settings and Google’s policies.

We may disclose information when reasonably necessary to comply with law, protect users or the service, investigate fraud or security incidents, or complete a business reorganization subject to appropriate safeguards.

Storage, security, and retention

Plan payloads, draft payloads, generation rollback snapshots, and projected pay-period details are encrypted with authenticated encryption before database storage. Pay-period dates and lifecycle states remain queryable so Liftoff can identify periods that need review. Session and OAuth credentials receive additional protections appropriate to their purpose. Access to generated workbooks and pay-period details requires an authenticated account.

Saved plans remain until you delete them or request deletion. For each plan, we retain the current and immediately previous successful workbook generation; an older generation is removed after a newer one succeeds. Temporary source files used during successful generation are deleted immediately. Abandoned generation folders are scheduled for cleanup after a short safety window. Sessions normally expire after 30 days.

No system can guarantee absolute security. We maintain safeguards intended to reduce unauthorized access, disclosure, alteration, and loss.

Your choices

The plan manager lets you export or delete individual plans, download an account-level copy of your account details, saved plan data, and pay-period records, disconnect the Google Drive export connection, or permanently delete your Liftoff account and its saved data. Account exports exclude password hashes, active sessions, and Google access tokens. You may contact privacy@liftoff.cash if you cannot use these controls or want to request access to or correction of account information. We may need to verify your identity before completing a request. Certain information may be retained when required for security, fraud prevention, legal compliance, or resolving disputes.

Disconnecting Google Drive removes Liftoff’s stored Drive authorization but does not delete workbooks already exported to your Google Drive. You can also revoke Liftoff’s access from your Google Account permissions.

Children’s privacy

Liftoff is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information to the service.

Changes to this policy

We may update this policy as the service changes. We will post the revised policy here and update the date above. If a change materially alters how we use information, we will provide additional notice when appropriate.

Contact

Questions or privacy requests can be sent to privacy@liftoff.cash. General support is available at support@liftoff.cash.