Terms of Service

Udabyte LLC d/b/a FinancialHealth.io operates FinancialHealth.io, a personal financial management platform that helps real estate investors and individuals track properties, rental income, expenses, investments, and overall net worth. The platform provides tools for portfolio analysis, cash flow tracking, tenant management, deal analysis, and financial reporting.

The platform is provided as a software-as-a-service ("SaaS") product on a subscription basis. Features available depend on your subscription tier (Free, Pro, or Portfolio).

You must be at least 18 years old and capable of forming a binding contract to use FinancialHealth.io. By using the platform, you represent that you meet these requirements. The platform is intended for lawful use in managing personal or business financial data within the United States.

• You are responsible for maintaining the confidentiality of your login credentials
• You must provide accurate and current registration information
• You are responsible for all activity that occurs under your account
• Notify us immediately at [email protected] if you suspect unauthorized access
• One account per person. You may not share accounts or create accounts on behalf of others without authorization

You agree not to:

• Use the platform for illegal purposes or in violation of applicable laws
• Enter false, misleading, or fraudulent financial data
• Attempt to gain unauthorized access to other users' accounts or our systems
• Reverse engineer, decompile, or attempt to extract our source code
• Use automated tools (scrapers, bots) to access the platform without prior written consent
• Resell, sublicense, or white-label the platform without a written reseller agreement
• Upload malicious code, viruses, or any content intended to disrupt the service
• Circumvent any rate limits, access controls, or security features
• Use the platform in a manner that violates any applicable federal, state, or local law, including the Fair Credit Reporting Act (FCRA) and Gramm-Leach-Bliley Act (GLBA)

You retain full ownership of all financial data, documents, and content you upload or enter into the platform ("Your Data"). By using the platform, you grant us a limited, non-exclusive license to store, process, and display Your Data solely to provide the service to you.

We do not claim any ownership rights over Your Data. We do not sell or share Your Data with third parties except as described in our Privacy Policy.

You are responsible for the accuracy of data you enter and for maintaining backups. We provide data export tools, and we recommend exporting your data regularly.

FinancialHealth.io does not perform tenant background, credit, or rental-history checks, does not collect Social Security Numbers, and is not a consumer reporting agency (CRA) as defined by the FCRA (15 U.S.C. § 1681 et seq.). We do not obtain, generate, transmit, or sell consumer reports. Any tenant "screening" fields in the app are notes you enter from your own records.

If you screen applicants using a separate third-party service, you — as the landlord or property manager — are the "user" of those consumer reports under the FCRA and bear full responsibility for FCRA compliance, including obtaining written authorization from applicants, providing adverse-action notices, and complying with permissible-purpose requirements. You must not use screening data for any purpose other than evaluating a specific tenancy application. Violations of the FCRA may expose you to civil liability. We recommend consulting an attorney familiar with landlord-tenant and consumer-protection law in your jurisdiction.

We implement the following technical security measures to protect your data:

AES-256-GCM uses a 16-byte random initialization vector (IV) per encryption operation and includes a Galois/Counter Mode (GCM) authentication tag to detect tampering. Encryption keys are stored as environment secrets, never in source code or the database.

All payment card transactions — including subscription billing and rent collection — are processed exclusively by Stripe, Inc., a PCI-DSS Level 1 certified payment processor. Udabyte LLC d/b/a FinancialHealth.io does not collect, store, transmit, or process raw payment card data (card numbers, CVVs, expiration dates) at any point.

Because cardholder data flows directly between your browser and Stripe (via Stripe Elements or Stripe Checkout), Udabyte LLC d/b/a FinancialHealth.io qualifies as a SAQ A merchant under PCI-DSS. Stripe's privacy policy governs the handling of your payment information.

For rent collection via ACH: bank account numbers are handled by Stripe Connect. We do not store ACH account details.

In the event of a security incident that results in unauthorized access to your unencrypted personal or financial data ("data breach"), we will:

• Notify affected users by email within 72 hours of becoming aware of the breach (consistent with GDPR Article 33 and applicable U.S. state breach notification laws)
• Notify applicable state attorneys general and regulators as required by the breach notification laws of your state of residence
• Describe in the notice: the nature of the breach, categories of data involved, the steps we have taken, and recommended protective actions for you
• Maintain an incident response plan and conduct a post-incident review for any material breach

Because sensitive fields (bank tokens, API tokens) are encrypted with AES-256-GCM, a breach of our database alone does not expose plaintext values of those fields. Notification requirements under state law may differ based on whether encrypted data is considered compromised.

The platform integrates with third-party services (Stripe, Plaid, Google, Microsoft, and a third-party AI provider). Your use of these integrations is subject to each provider's terms and privacy policies. We are not responsible for the availability, accuracy, or security practices of third-party services.

By connecting a bank account via Plaid, you agree to Plaid's End User Privacy Policy and authorize us to retrieve read-only transaction, balance, and account data on your behalf. Your bank login credentials are entered directly into Plaid's secure interface — they never reach our servers. We store only the encrypted Plaid access token. Plaid is SOC 2 Type II and PCI-DSS Level 1 certified.

By connecting Google Drive or OneDrive, you grant us access only to files created by FinancialHealth.io within your cloud storage. We do not access other files in your account. OAuth refresh tokens are encrypted at the application layer.

The AI Assistant and AI Insights features are powered by a trusted third-party large language model provider. By using these features, you acknowledge and agree to the following:

• Data transmission: When you use the AI Assistant or Insights, an anonymized financial snapshot is transmitted to our AI provider's API. This snapshot contains only aggregated metrics — no names, addresses, account names, transaction descriptions, or other personally identifying information. Other AI features send more (e.g. transaction categorization sends merchant names; statement import sends the document you choose) — see our Privacy Policy §4a for the full, per-feature list of what is and is not transmitted.
• No training use: Our AI provider's API terms prohibit using API inputs and outputs to train models. Your financial data is not used to improve any provider's AI systems.
• Retention: Our AI provider retains API data only briefly (typically up to 30 days) for trust and safety review, then deletes it. FinancialHealth.io does not control the provider's internal retention practices beyond these contractual commitments.
• Not financial advice: AI-generated insights, projections, and responses are for informational purposes only. They do not constitute financial, tax, legal, or investment advice. Always consult a licensed CPA, CFP, or attorney before acting on AI-generated content.
• Accuracy: AI responses may contain errors or omissions. You are responsible for verifying any figures or recommendations against your actual financial records.
• Optional: AI features are entirely optional. The platform is fully functional without them. You may decline to use the AI Assistant or Insights panel at any time.

By using AI features, you also agree to our AI provider's usage policies as they apply to downstream users of its API.

All platform software, design, trademarks, and content created by Udabyte LLC d/b/a FinancialHealth.io are our exclusive property, protected by copyright, trademark, and other applicable laws. You may not copy, distribute, modify, or create derivative works from our platform without written permission.

We welcome feedback and suggestions. Any feedback you provide may be used by us to improve the platform without obligation or compensation to you.

If you grant access to other users (e.g., CPA, advisor, spouse, property manager) under the shared access features, you are responsible for ensuring those users comply with these Terms and all applicable laws, including FCRA and GLBA. You can revoke access at any time from Settings → Shared Access.

Shared users may only access the data explicitly shared with them. Unauthorized access to other users' financial data is a violation of these Terms and may violate the Computer Fraud and Abuse Act (18 U.S.C. § 1030).

We aim to maintain high availability but do not guarantee uninterrupted access. We may perform maintenance, updates, or emergency changes that temporarily affect availability. We will provide advance notice of planned downtime when feasible.

THE PLATFORM IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, UDABYTE LLC D/B/A FINANCIALHEALTH.IO AND ITS OFFICERS, DIRECTORS, AND EMPLOYEES SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR LOSS OF PROFITS, DATA, OR BUSINESS, ARISING FROM YOUR USE OF THE PLATFORM — EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

OUR AGGREGATE LIABILITY FOR ANY CLAIMS ARISING FROM THESE TERMS SHALL NOT EXCEED THE AMOUNT YOU PAID TO US IN THE 12 MONTHS PRECEDING THE CLAIM.

Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain types of damages. In those jurisdictions, our liability is limited to the greatest extent permitted by applicable law.

You agree to indemnify and hold harmless Udabyte LLC d/b/a FinancialHealth.io, its officers, directors, employees, and agents from any claims, losses, or damages (including reasonable legal fees) arising from: (a) your violation of these Terms; (b) Your Data; (c) your violation of any third-party rights; (d) your violation of applicable law (including FCRA, GLBA, or state tenant-landlord laws); or (e) your use of the platform in a manner not authorized by these Terms.

These Terms are governed by the laws of the State of Georgia, USA, without regard to conflict of law principles. Any disputes shall be resolved through binding arbitration under the AAA Consumer Arbitration Rules, except that either party may seek injunctive relief in court for intellectual property disputes or unauthorized access claims.

You waive any right to participate in a class action lawsuit or class-wide arbitration.

We may update these Terms as the product evolves. We will notify you of material changes via email and in-app notice at least 30 days before the changes take effect. Your continued use of the platform after the effective date constitutes acceptance.

For questions about these Terms: