Privacy Policy

Budgeteer ("Budgeteer," "we," "us," or "our") provides an envelope budgeting application that lets you connect your financial accounts, import transactions, and plan how you spend. This Privacy Policy explains what personal and financial information we collect, how we use and share it, how long we keep it, and the choices and rights you have.

This policy applies to the Budgeteer website, mobile apps, and related services (together, the "Service"). By creating an account or connecting a financial account, you agree to the practices described here. If you do not agree, do not use the Service.

Budgeteer is currently in private alpha. Features described on our website may change. We will update this policy as the Service evolves.

Budgeteer uses Plaid to connect to your bank, credit card, and other financial accounts and to import the data described above. By connecting an account through Budgeteer, you also agree to Plaid's End User Privacy Policy.

You grant Budgeteer and Plaid the right, power, and authority to access and transmit your financial information from your financial institution, as authorized by you and according to the terms of Plaid's End User Privacy Policy. Plaid handles your information in accordance with its own privacy policy, not this one, when acting as your data access provider.

To learn how Plaid collects, uses, and handles your data — and to manage or disconnect the financial connections Plaid maintains for you across services — visit Plaid's privacy hub at my.plaid.com and review the Plaid End User Privacy Policy.

We use the information we collect only to provide and improve the Service. Specifically, to:

• create and maintain your account and authenticate you;
• import, reconcile, and display your transactions and balances;
• power budgeting features such as envelopes, targets, reports, forecasts, and age-of-money;
• suggest categories and normalize payee names (see section 05);
• provide customer support and respond to your requests;
• monitor, secure, debug, and improve the Service;
• detect and prevent fraud and abuse; and
• comply with legal obligations.

We do not sell your personal or financial information. We do not use your financial data or transactions for advertising, and we do not share it with advertisers or data brokers.

Budgeteer uses automated processing, including large language models, to suggest a likely budget category for a transaction, rewrite bank memos into readable payee names, and help plan goals you describe in plain language. These suggestions are always confirmable by you.

To provide these features we may send transaction details (such as the bank memo, amount, and date) and goal descriptions to third-party AI service providers that process this data on our behalf under contract. We instruct these providers not to use your data to train their models, and they are not permitted to use it for their own purposes. We do not send your banking credentials, full account numbers, or login information to AI providers.

We share information only as described below:

• Service providers. With vendors who process data on our behalf to operate the Service — including Plaid (financial data access), hosting and infrastructure providers, and AI processing providers — under contracts that limit their use of the data to providing services to us.
• Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of Budgeteer, our users, or the public, and to detect or prevent fraud or security issues.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred subject to this policy or a successor with equivalent protections.
• With your consent. For any other purpose disclosed to you at the time, with your direction or permission.

We do not sell or rent your personal or financial information, and we do not share it for cross-context behavioral advertising.

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account or specific data, we delete or de-identify the associated personal and financial information within a commercially reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements.

When you disconnect a financial account, we stop pulling new data from it through Plaid. See section 08 for how to disconnect and delete.

You are in control of the accounts you connect and the data we hold:

• Disconnect an account. Remove a linked financial account at any time in Budgeteer's settings. We stop importing new data from that account.
• Delete your data or account. Request deletion of specific data or your entire account in settings or by emailing us (see section 13). We will delete or de-identify your data as described in section 07.
• Revoke Plaid access. You can also manage and revoke the connections Plaid maintains on your behalf at my.plaid.com.

We use technical and organizational measures designed to protect your information, including encryption of data in transit and at rest, access controls, and the principle of least privilege. We do not store your bank login credentials; those are handled by Plaid and your financial institution.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your information, we will notify you and the relevant authorities as required by law.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of California, other U.S. states with privacy laws, the EEA/UK, and Canada may have additional rights under laws such as the CCPA/CPRA, GDPR, and PIPEDA.

To exercise any of these rights, contact us using the details in section 13. We will not discriminate against you for exercising your rights, and we will verify your identity before acting on a request. You may also have the right to lodge a complaint with your local data protection authority.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date above and, for material changes, provide notice through the Service or by email. Your continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

Budgeteer
privacy@budgeteer.com