C
Credo Back to home

Privacy Policy

Last updated: June 12, 2026

This Privacy Policy explains how Credo ("we", "us") collects, uses, and protects your information when you use our personal finance application (the "Service").

1. Information We Collect

  • Account information: your name, email address, and date of birth, provided during sign-up.
  • Financial data: when you connect a financial institution through Plaid, we receive read-only data such as account balances and transaction history. We never receive or store your bank login password.
  • Usage data: limited technical information needed to operate the Service, such as feature usage counts.

2. How We Use Your Information

  • To provide and personalize the Service, including dashboards, budgets, forecasts, and AI insights.
  • To process subscription payments through our payment processor.
  • To maintain the security and integrity of the Service.

3. AI Processing

When you use the AI Assistant or AI budget suggestions, a summary of your financial data is sent to our AI provider to generate a response. This data is used only to produce your response and is not used to train third-party models. AI output is informational only and is not financial advice.

4. Third-Party Service Providers

We rely on trusted providers to operate Credo: Plaid (bank connections), our authentication provider (sign-in and account management), Stripe (payment processing), and our database and hosting providers. Each processes your data only as needed to provide their service and under their own privacy commitments.

5. How We Protect Your Data

Data is encrypted in transit using TLS and stored with encryption at rest. Access tokens for financial connections are treated as sensitive credentials. We restrict access to personal data to what is necessary to operate the Service. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Sharing

We do not sell your personal or financial information. We share data only with the service providers described above, or when required by law.

7. Your Choices and Rights

You can disconnect a financial institution at any time, edit your profile, or delete your account, which removes your associated data. Depending on your location, you may have additional rights to access, correct, or delete your personal data.

8. Data Retention

We retain your information for as long as your account is active. When you delete your account, we delete or anonymize your personal and financial data, except where retention is required by law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service.

10. Contact

For privacy questions or requests, contact privacy@finza.dev.

This document is a general template provided for the Credo application and does not constitute legal advice. Have it reviewed by a qualified attorney and tailored to your actual data practices and jurisdiction before relying on it in production.