Privacy Policy

Last updated: 21 September 2026

This Privacy Policy explains how KitFiler / Infiniti Systems ("KitFiler", "we", "us") processes personal data when you use KitFiler Money at kitfiler.com.

1. Who we are

Controller for the platform: KitFiler / Infiniti Systems. Contact: admin@kitfiler.com. Team owners may also act as controllers for data their members enter into a shared workspace; in that case we process that data to provide the service on their instructions.

2. Data we process

Account / profile: name, email, authentication identifiers (including Google OAuth subject where used), password hashes, role/membership metadata.
Financial records you enter: accounts, transactions, categories, budgets, goals, customers, reports, and related notes.
AI mailbox: emails and attachments sent to your assigned address (*@ai.kitfiler.com), ingest history, and extraction results.
Team invites: invitee email, role, and invite status.
Technical data: IP address, browser/user-agent, security logs, and essential cookies required for session/auth.

3. Purposes

We process data to provide and secure the SaaS, authenticate users, enforce team roles, power AI Bookkeeper (document extraction and Q&A), deliver transactional email, improve reliability, and meet legal obligations.

4. Cookies

We use essential cookies for authentication/session (kitfiler.money.auth), anti-forgery, and related security. These are necessary for the app to work. A consent banner records that you have been informed; accepting it for essential-only use does not enable advertising cookies. See also our on-site cookie notice.

5. Processors and sharing

We do not sell personal data. We may share data with infrastructure and AI processors needed to run the product, including:

Amazon Web Services (SES / S3): inbound mail receipt, storage of mail payloads/attachments, and transactional outbound email.
xAI API: document extraction and AI Q&A — relevant content (for example email bodies, attachments, or chat prompts) is sent to the processor to generate results.
Google: authentication data when you choose Google sign-in.

We may also disclose data when required by law or to protect the security of the service.

6. Retention

Account and bookkeeping records are retained while your account/team is active and for a reasonable period afterward for backup, dispute, and legal purposes. You may request deletion as described on our Data deletion page.

7. Security

We apply access controls, team scoping, encrypted transport (HTTPS), and password/lockout policies. No method of transmission or storage is perfectly secure; report suspected issues to admin@kitfiler.com.

8. Children's privacy

KitFiler Money is not directed at children under 16 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps.

9. Your rights

Depending on applicable law, you may request access, correction, deletion, or restriction. Contact admin@kitfiler.com with the email on your account. Team members should also coordinate with their team owner for shared workspace data.

10. International transfers

Data may be processed in regions where our hosting and AI providers operate. Where required, we use appropriate safeguards.

11. Contact

KitFiler / Infiniti Systems — kitfiler.com — admin@kitfiler.com.

This policy is a practical SaaS summary and is not a substitute for counsel review.