Your data, your rules.
Patrice is built on a simple principle: your financial data belongs to you. Here's exactly how we protect it.
Encrypted at rest and in transit
All your data is stored encrypted using AES-256 (Supabase / PostgreSQL). Connections between your browser and our servers are protected by TLS 1.3. Your data is unreadable in transit, and unreadable to anyone who reached the storage layer.
No bank connection
Patrice has no integration with Plaid, Budget Insight, or any banking aggregator. We never connect to your bank accounts. This means zero risk of data leaks through a third-party financial API.
You control what you enter
Every figure in Patrice comes from you: typed in by hand, imported from a file you provide, or dictated to the AI assistant. No connection to a third-party account, no scraping. You decide what information exists in your account.
AI analyses: what leaves, what doesn't
AI analyses are optional and Premium-only. When you run one, your amounts and asset types are sent to Anthropic's Claude API; the labels you entered, first names and the city of your properties are replaced by neutral identifiers (ACTIF_1, PERSONNE_A, LIEU_2) before sending, then restored on display. Under commercial terms: no model training, 30-day maximum retention. Your email, login credentials and payment data never leave.
Database hosted in Europe
Your data is stored in a Supabase database hosted in the European Union (AWS eu-west region). Some subprocessors may process data in the United States, under Standard Contractual Clauses: Vercel (hosting and server functions of the app), Resend (emails), Anthropic (AI analyses, when you run one) and Stripe (payments). The full list is in our privacy policy.
We don't sell your data
Patrice is a paid product, not an advertising platform. Our revenue comes from subscriptions — not from monetizing your personal or financial information. Your data is never sold or transferred for commercial purposes; it is shared only with the technical subprocessors listed in our privacy policy.
Isolation enforced by the database, not the screen
Every table is protected by PostgreSQL Row Level Security policies: the server itself refuses a row that is not yours, whatever code asks for it. A display bug, a browser extension or a forged request cannot cross that line. Your records are invisible to other users at the database level.
Shared household, compartmented
When you share your wealth with a partner, the sharing is a database rule too: each member sees only what the household shares, with a role — admin, editor or reader. A household has two people at most: the person you invite (a partner, or an adviser as a reader, who can look without changing anything) takes the second place. Leaving the household separates the data in one step.
Secure authentication
Authentication is handled by Supabase Auth. Passwords are never stored in plain text — they are hashed and salted using industry-standard algorithms. Sessions are token-based and expire automatically; changing your password requires the old one.
Two-factor authentication, free
From the settings, enable a second factor with an authenticator app (Google Authenticator, Authy, 1Password…). The app then asks for a six-digit code at every sign-in, Google included, and to delete the account. No SMS, no phone number, no extra cost.
Your data follows you
Export your whole account whenever you want, from the settings: a CSV file, or the complete, documented JSON export (Premium) — assets with their history, budgets, goals, tax profile — which Patrice can re-import as is. No closed format: what you entered comes out readable, for you, your adviser or another app.
Permanent deletion, in one step
From the settings, deletion immediately erases all your data — assets, budgets, reports, household — then deletes the authentication account itself, server-side. The purge follows no hand-written list: it walks the database schema, so data introduced after this page is covered by it. Nothing remains beyond the host's time-limited technical backups. No email request, no waiting period.
Watch