Summary. Money Mastery holds your transactions, your income and expense figures, and the notes you write about them. We do not connect to your bank and we never see your online banking login. We do send your financial data to one artificial-intelligence provider (Google), so the product can read your statements and answer your questions;Section 6 lists what leaves and when. We do not sell your data, and we have never sold it. Your spreadsheets are hosted in a managed Google Drive account that we administer and share with you, explained in Section 4.
This policy covers the Money Mastery System: the Google Sheets workbook we provision for you, the sidebar and dialogs that run inside it, the web application at moneymastery-system.com, our servers, and the marketing website.
You can upload a statement as a CSV file, a PDF, or a photograph. What happens next differs by format, and the difference matters:
The uploaded file itself is not stored on our servers: the bytes are held only in memory while they are read, and are never written to our database. Only the resulting transaction rows are kept. We are building automatic redaction for this path. Until it ships, redact anything in a statement PDF that you do not want processed before you upload it.
Every question you ask Clarity and every answer it gives is stored on our servers against your email address, and is kept for as long as your account is active, so Clarity can keep context across sessions. It is deleted with your account, and you can ask us to delete it sooner at any time under Section 11.
If you complete the Money Clarity Assessment, we hold your answers: alongside your email and your result, they include the budget band, age range and gender you selected, and the page you arrived from. They are used to show your result and are never joined to your transaction data. They are covered by the deletion right in Section 11 like everything else.
The same applies if you only ever gave us an email address (joined a waitlist, downloaded something, or made an enquiry) and never became a customer. You do not have to have bought anything to ask us what we hold about you, or to have it deleted.
When we set you up, our system creates your folder and your workbooks inside a Google Drive account belonging to Donna Roggio LLC, and then shares them with your email address with editor permission.
In Google's terms, we are the owner of those files and you are a collaborator on them. You can read, write and work in them. Three consequences follow:
We describe this because a policy that let you assume the workbook was yours would be misleading on a point that matters.
The buttons, sidebars and dialogs in your workbook are Google Apps Script, and that code runs in your own Google account, not on our servers. When you categorise a transaction from inside the sheet, that work is happening in your session, under Google's terms with you. We mention it because it is a different processing location from everything else described here, and because it means some of what the product does never touches our infrastructure at all.
The web application runs on Cloudflare Workers and its database is Cloudflare D1. That database holds your transactions, your categories, your PIN hash, your session records and your Clarity conversations. Cloudflare operates a global network, and your data may be stored or processed at any of its locations. We also use Cloudflare’s file storage, in three separate buckets that are kept apart on purpose. One holds receipts and documents you upload against a transaction; those are your financial records, and they are treated as such. One holds our marketing videos, and no customer data of any kind is stored in it. One holds files our own team attaches to internal work, and no customer data is stored in it either.
| Purpose | Data used | Legal basis (UK/EU GDPR Art. 6) |
|---|---|---|
| Running the product you bought: categorising, totalling, reporting | Financial data, account data | Art. 6(1)(b) performance of a contract |
| Reading an uploaded statement, and answering Clarity questions | Statement contents, transactions, totals | Art. 6(1)(b): you initiate each one |
| Improving categorisation accuracy from corrections you make | Merchant text and the category you chose | Art. 6(1)(f) legitimate interests |
| Support, and telling you about changes to the Service | Name, email, your message | Art. 6(1)(b) and 6(1)(f) |
| Keeping accounts secure and investigating misuse | Sign-in records, request logs | Art. 6(1)(f), and Art. 32 as a legal duty |
| Marketing-site analytics | Pages viewed, device and browser | Art. 6(1)(a) consent: see Section 8 |
| Meeting legal obligations and defending legal claims | Whatever the obligation requires | Art. 6(1)(c) and 6(1)(f) |
We do not use your financial data to train any artificial-intelligence model of our own. Corrections you make do improve a rules table, and that table is specific to your own account. Our Google Gemini access is on a paid tier, under terms in which Google does not use what we send to improve its models. Whether the other providers named in Section 7 do so is governed by the terms we hold with each of them.
You are interacting with an AI system. Clarity is a large language model, not a person. No human at Donna Roggio LLC reads your Clarity conversations in the ordinary course of business.
Nothing in this Service makes an automated decision producing a legal effect, or similarly significantly affecting you, within the meaning of GDPR Art. 22. We do not score you for credit, we approve or deny nothing, and every categorisation the AI suggests can be overridden by you.
Clarity is a tool for looking at your own numbers. It is not a licensed financial adviser, accountant or tax professional, and its output should not be relied on as advice. It can be wrong.
We do not sell your personal information, and we have not sold or shared it for cross-context behavioural advertising in the preceding twelve months (California Civil Code §1798.115(c), §1798.120). We do not trade or rent it. The list below is the complete set of third parties that receive any of it.
| Recipient | What they receive | Why |
|---|---|---|
| Google LLC (Sheets, Drive, Apps Script) |
Everything in your workbook, all transactions and figures | The product is built on Google Sheets; your workbook is a Google file |
| Google LLC (Gemini AI) |
Uploaded statements in full and unredacted for PDF and image; Clarity questions with transaction rows and totals | Reading statements; answering your questions |
| Cloudflare, Inc. | Everything held by the web application: transactions, PIN hashes, session records, Clarity conversations | Hosting and database |
| Resend | Your email address and the content of email we send you | Email delivery |
| Wix.com Ltd. | Name, email, and the text of support requests and enquiries submitted through our forms | Delivering those messages to us; Wix hosts the enquiry forms |
| Google LLC (Google Analytics) |
Pages viewed on the marketing site, browser and device type. No financial data | Understanding which pages are useful: see Section 8 |
Depending on your plan you may share your workbook with an accountant, bookkeeper, spouse or business partner. Anyone you share it with can see everything in it. That sharing is yours to grant and yours to revoke, and we cannot judge whether it is wise.
We may disclose information where we are legally required to. If the business is sold or merged, your information may transfer to the acquirer, and we will tell you before it does.
We are based in the United States, and our providers are US companies operating global infrastructure. If you are in the UK or the EEA, you should assume your data is transferred outside your jurisdiction. We rely on the EU–US Data Privacy Framework and its UK extension where a provider is certified under it, and on the European Commission's Standard Contractual Clauses where it is not (GDPR Art. 45 and Art. 46).
Money Mastery can turn a report into a page on our website with its own web address, so you can send it to someone who does not have an account. Sharing a workbook gives access to the live file. Publishing a report creates a fixed copy of the figures as they stood at that moment, and that copy does not change afterwards.
Nothing is ever published or shared automatically. A report becomes readable by another person only when you choose to publish it and then choose to create a share link. We do not select who receives it, we never send it on your behalf, and we do not keep the address of anyone you send it to.
There are two kinds of link:
A share link stops working 90 days after you create it unless you choose otherwise, and you can revoke it at any time. When a link expires or is revoked, the published copy is deleted, not merely hidden.
Revoking a link stops new visits, but it cannot recall a report somebody has already opened. Anyone who has read, printed, saved or forwarded it still has what they saw.
Nothing is stored on your device until you say yes. Analytics storage is switched off before the Google tag loads, not after: you will see a banner asking, and until you answer, no analytics cookie is written.
It is remembered, it is not asked again on the next page, and refusing costs you nothing on this site. Nothing here is gated behind accepting cookies.
You can change your mind at any time. Every page carries a Cookie settings link in the footer that reopens this choice. Withdrawing is one click, the same as giving it, which is what GDPR Art. 7(3) requires and not merely what we thought was polite.
Analytics runs without a banner, in jurisdictions that do not require prior consent for it. We run no advertising or ad-personalisation tags anywhere, for anyone: those are switched off globally rather than being made conditional on a region. If you would rather not be counted, the Cookie settings link in the footer works wherever you are.
We would rather describe this accurately than impressively.
No system is perfectly secure, and we will not tell you otherwise. If we discover a breach affecting your personal data we will notify the relevant supervisory authority within 72 hours where GDPR Art. 33 requires it, and we will notify you directly where Art. 34 or applicable US state law requires it.
Where we are required to keep records for tax or legal reasons we will keep only what that obligation requires, and nothing else.
Write to [email protected] for any of the following. We do not charge for these requests and we will not ask you to justify one.
You additionally have the rights to restrict or object to processing (GDPR Art. 18 and Art. 21) and to data portability in a machine-readable format (Art. 20). We will respond within one month, as Art. 12(3) requires, and will tell you if we need to extend that. You have the right to complain to your supervisory authority: in the UK, the Information Commissioner's Office.
Under the CCPA as amended by the CPRA you may request the specific pieces of personal information we hold (§1798.100), the categories collected and disclosed in the preceding twelve months (§1798.110, §1798.115), deletion (§1798.105) and correction (§1798.106). We will respond within 45 days (§1798.130). We do not sell or share your personal information, so there is nothing for you to opt out of (§1798.120). We will not discriminate against you for exercising any of these rights (§1798.125).
You can cancel by emailing us, and cancelling will never be made harder than signing up was. Cancelling and deleting are separate requests: tell us if you want both, and we will do both.
Money Mastery is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
Money is a common source of real distress, and this is a product people sometimes open on a bad day. We are a tool for looking at numbers and we are not equipped to help with a crisis. If you are struggling, in the United States you can call or text 988, the Suicide and Crisis Lifeline, free and at any hour; elsewhere, findahelpline.com will point you to the equivalent. If you are in immediate danger, call your local emergency number.
If we change this policy materially (a new recipient of your data, a new use of it, or a change to your rights) we will email you before the change takes effect, not merely update the date at the top of the page.
If you are in the European Union, you may contact our EU representative under Article 27 of the GDPR about anything in this policy, in place of or in addition to contacting us directly:
You also have the right to complain to your national supervisory authority. In Spain that is the Agencia Española de Protección de Datos (AEPD); if you live elsewhere in the EU, your own country's authority.
You may contact us at the address above, and you have the right to complain to the Information Commissioner's Office.
Last Updated: 2026-09-24
© 2026 Donna Roggio LLC. All rights reserved.