Privacy Policy

MoneyBook ("we," "our," or "us") operates a private-by-default money operating system and related services (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our website, applications, and any connected financial account features. Please read it carefully.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service. We may update this policy from time to time; we will notify you of material changes by posting the updated policy and updating the "Last updated" date.

1. Information we collect

We collect information you provide directly, information we obtain when you use the Service, and information from third parties when you connect financial accounts.

Information you provide

• Account and profile: name, email address, and password or other authentication credentials when you register or sign in.
• Content you create: transaction descriptions, categories, notes, account names, and other data you enter into the Service.
• Communications: messages you send to us (e.g., support requests) and feedback you provide.

Information we collect automatically

• Usage data: how you use the Service (e.g., pages visited, features used, time spent).
• Device and technical data: device type, operating system, browser type, IP address, and similar identifiers.
• Log data: access times, referring URLs, and other server logs.

Information from connected accounts

If you connect your financial accounts through our Service (e.g., via Plaid or similar providers), we receive account and transaction data from those providers in accordance with your authorization and their policies. This may include account names, types, balances, transaction history, and identifiers. We use this data only to provide and improve the Service and as described in this policy and our Plaid disclosure.

2. How we use your information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service.
• Authenticate you and manage your account.
• Process and display your financial data (e.g., transactions, balances) and support features like categorization and reporting.
• Send you service-related messages (e.g., account notifications, security alerts) and, with your consent, marketing or product updates.
• Respond to your requests and provide support.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations and enforce our terms.
• Analyze usage in an aggregated, non-personally-identifying way to improve our product.

3. How we share your information

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers: With vendors who help us operate the Service (e.g., hosting, analytics, identity and account-linking providers like Plaid), under contracts that limit their use to providing services to us.
• Legal and safety: When required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In connection with a merger, sale of assets, or other change of control, subject to the same privacy commitments.
• With your consent: Where you have given us clear consent to share for a specific purpose.

4. Third-party services and links

The Service may integrate with third-party services (e.g., Plaid for account linking). Those services have their own privacy policies and data practices. When you connect an account, you authorize us and the relevant provider to exchange and use data as described in our Plaid disclosure and the provider's policies. We encourage you to review their terms and privacy notices.

Our site or app may contain links to other websites. We are not responsible for their privacy practices.

5. Data security

We use administrative, technical, and physical safeguards to protect your information, including encryption in transit (e.g., TLS) and at rest where applicable, access controls, and secure development practices. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. For more detail, see our Security page.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service and fulfill the purposes described in this policy. We may retain certain information as required by law, for legitimate business purposes (e.g., dispute resolution, security), or in anonymized or aggregated form. If you delete your account or request deletion, we will process your request in accordance with our Data deletion page.

7. Your rights and choices

Depending on where you live, you may have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Opt-out: Opt out of certain uses (e.g., marketing emails) or withdraw consent where processing is based on consent.
• Restriction or objection: In some jurisdictions, request restriction of processing or object to certain processing.

To exercise these rights, contact us at the address below. We will respond within the timeframes required by applicable law. You may also have the right to lodge a complaint with a supervisory authority. For account and data deletion specifically, see our Data deletion page.

8. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us and we will delete it promptly.

9. International users

We may store and process information in the United States or other countries. If you access the Service from outside the United States, you consent to the transfer and processing of your information in accordance with this policy and applicable law.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Material changes may be communicated via email or a notice in the Service. Your continued use after changes constitutes acceptance of the updated policy.

11. Contact us

For privacy-related questions, requests, or complaints, contact us at Support or the contact information provided there.

This policy is provided for your convenience and is not legal advice. You may wish to have your own legal counsel review it.