Privacy

Privacy must be part of the product.

Finelo’s financial context is sensitive. The production product should be explicit about data collection, storage, deletion, and third-party tools.

Current static build

Local-only calculators

The current static calculators run in the browser and do not connect to a database or API.

Production requirement

Consent and deletion

If accounts, dashboards, or saved plans are added, users need clear consent, export, deletion, and security controls.

Analytics

Measure respectfully

Analytics should avoid collecting private finance inputs unless users explicitly save them.

Security

Protect sensitive context

Use HTTPS, secure cookies, rate limits, input validation, encryption at rest, and least-privilege access for any backend launch.