Privacy Policy

Last updated: September 23, 2025

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.

Personal Information

  • Name, email address, and phone number
  • Account credentials and preferences
  • Payment and billing information
  • Communication preferences

Financial Information

  • Bank account information (read-only access)
  • Transaction history and spending patterns
  • Financial goals and preferences
  • Investment and savings data

Technical Information

  • Device information and IP address
  • Browser type and version
  • Usage patterns and feature interactions
  • Cookies and similar technologies

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services:

Service Delivery

  • Process transactions and manage your account
  • Provide financial insights and recommendations
  • Enable secure account connections
  • Deliver customer support

Service Improvement

  • Analyze usage patterns to improve features
  • Develop new products and services
  • Conduct research and analytics
  • Prevent fraud and ensure security

Communication

  • Send important account updates
  • Provide customer support
  • Share relevant financial insights
  • Send marketing communications (with consent)

3. Information Sharing

We do not sell, rent, or share your personal information with third parties, except in the following limited circumstances:

Service Providers

We may share information with trusted service providers who assist us in operating our platform:

  • Banking and financial data providers (Plaid, Yodlee)
  • Cloud hosting and infrastructure providers (AWS)
  • Payment processors (Stripe)
  • Customer support and communication tools

Legal Requirements

We may disclose information when required by law or to:

  • Comply with legal obligations
  • Respond to lawful requests from authorities
  • Protect our rights and property
  • Ensure user safety and security

4. Data Security

We implement comprehensive security measures to protect your information:

Encryption

  • 256-bit SSL encryption for data transmission
  • End-to-end encryption for sensitive data
  • Encrypted data storage
  • Secure key management

Access Controls

  • Multi-factor authentication
  • Role-based access permissions
  • Regular security audits
  • Employee security training

Monitoring

  • 24/7 security monitoring
  • Automated threat detection
  • Regular security assessments
  • Incident response procedures

5. Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

  • Request a copy of your personal data
  • Export your financial data
  • View your account information
  • Download your transaction history

Correction and Updates

  • Update your account information
  • Correct inaccurate data
  • Modify your preferences
  • Change communication settings

Deletion and Restriction

  • Request deletion of your account
  • Opt out of marketing communications
  • Restrict data processing
  • Withdraw consent for data use

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

  • Account Information: Until account closure + 3 months
  • Financial Data: Until account closure + 3 months
  • Transaction Records: Until account closure + 3 months
  • Support Communications: 3 months after last contact
  • Marketing Data: Until account closure + 3 months

7. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by relevant authorities
  • Certification schemes and codes of conduct
  • Binding corporate rules

8. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending email notifications
  • Displaying in-app notifications
  • Updating the "Last updated" date

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our Contact page.