# Budget Vault

> Budget Vault is an encrypted personal, family, and organization financial management platform (Georgian UI, GEL / ₾ currency) built on a Zero-Knowledge client-side security architecture.

## Overview

Budget Vault encrypts all user transactions, categories, budgets, and workspace parameters directly in the user's browser using AES-GCM 256-bit cryptography and PBKDF2-HMAC-SHA256 (600,000 iterations). Raw financial records are never sent to or stored on server infrastructure in plaintext.

## Key Capabilities

- **Zero-Knowledge Encryption:** Client-side Web Crypto API AES-GCM 256 encryption. Plaintext never touches cloud servers.
- **4 Distinct Workspaces:**
  - *Personal:* Private income, expense, and liquid asset tracking.
  - *Family:* Shared household expense allocations, category budgets, and member limits.
  - *Organization (OPEX):* Operational expenditures, contractor payments, and team attribution.
  - *B2B Partnership:* Commercial contracts, recurring supplier fees, and invoice logging.
- **Dual Cloud Synchronization (4-File Canonical Vault):**
  - *Google Drive:* User-owned cloud snapshot stored under `budgetVault/` using restricted `drive.file` scope.
  - *Cloud Firestore:* Real-time live synchronization stored strictly as encrypted containers under `/users/{userId}/budgetVault/`.
  - Canonical 4-file structure across all tiers: `budget_vault_active_current.enc`, `budget_vault_active_backup.enc`, `budget_vault_archive_current.enc`, `budget_vault_archive_backup.enc`.
- **Interactive Sandbox Demo (/demo):** Free, client-only preview environment running in `sessionStorage` with sample data. No sign-up, email, or credentials required.
- **Zero Lock-In:** Complete unencrypted CSV and JSON data export available at any time from user settings.

## Public Web Routes

- Home (Landing & Features): https://budgetvault-317b4.web.app/
- Interactive Demo: https://budgetvault-317b4.web.app/demo
- How It Works (Guide): https://budgetvault-317b4.web.app/how-it-works
- Security Center: https://budgetvault-317b4.web.app/security
- Privacy Policy (GDPR Art. 32): https://budgetvault-317b4.web.app/privacy
- Frequently Asked Questions (FAQ): https://budgetvault-317b4.web.app/faq

## Technical & AI Agent Specifications

- Full Technical Specification: https://budgetvault-317b4.web.app/llms-full.txt
- WebMCP Manifest: https://budgetvault-317b4.web.app/.well-known/webmcp.json
- Sitemap: https://budgetvault-317b4.web.app/sitemap.xml
- Robots Policy: https://budgetvault-317b4.web.app/robots.txt