Privacy Policy
Last updated: [EFFECTIVE DATE]
This Privacy Policy explains how Spendid ("we", "us") collects, uses, and protects your information when you use the Spendid budgeting application (the "Service"). [Replace with finalized copy.]
1. Information we collect
- Account information — the email address and password you provide when registering.
- Financial account data — when you connect a bank or card, we receive account, balance, and transaction information from your financial institution via Plaid (see below).
- Usage data — basic technical data (e.g. request logs) needed to operate and secure the Service. [Describe analytics, if any.]
2. How we use Plaid
We use Plaid Inc. ("Plaid") to connect your financial accounts. By connecting an account, you grant Spendid and Plaid the right to access and transmit your financial information as needed to provide the Service. Your use of Plaid is governed by Plaid's End User Privacy Policy. We do not sell your financial data.
3. How we protect your data
Plaid access tokens are encrypted at rest (AES-256-GCM) and are tied to your account. Each user's financial data is isolated and accessible only to that user. [Describe transport security, hosting, and access controls.]
4. Data sharing
We share data with service providers strictly as needed to run the Service (e.g. Plaid for account connectivity, and our hosting provider). [List all sub-processors. Describe any legal-disclosure obligations.]
5. Data retention & deletion
You may disconnect a financial institution or delete your account at any time. When you delete your account, your associated data — including stored access tokens — is removed. [State retention periods and process.]
6. Your rights
[Describe applicable rights — access, correction, deletion, portability — and how to exercise them, per GDPR/CCPA/etc. as applicable.]
7. Contact
Questions about this policy: [CONTACT EMAIL].