DRAFT — pending review by counsel. Not yet in effect.

This policy explains what [Company legal name] ("SquirrelsMoney") collects, why, who we share it with, and your choices.

What we collect

• Account details: your email, name, and US state.
• Bank data, with your permission, through Plaid: account names and the last four digits, balances, and transaction history (up to 24 months). We never receive your bank password, and we never store full account or routing numbers.
• What you tell us: answers to eligibility questions, accounts you report opening, checklist progress.
• Usage data: pages viewed and actions taken, recorded without your name or bank details.

How we use it

• To show what your money earns today, find better accounts, and track bonus requirements and your switch checklist.
• To send the emails you've asked for (alerts, reminders). Marketing email only with your consent.
• To prevent fraud and keep the service secure.

We don't sell your personal information, and we don't share your bank data with the banks we recommend.

Who we share it with

Only service providers who process data on our behalf, under contract:

• Plaid (bank connections) · Vercel (hosting) · Neon (database) · Upstash (rate limiting) · Resend (email) · Cloudflare (security and DNS) · Anthropic (AI processing of merchant names and public bank terms — never your name or account numbers) · Google (sign-in, if you choose it).
• When you click through to a bank, that bank receives a referral code — not your bank data.
• Where the law requires it.

How long we keep it

• Bank connections are removed when you disconnect, when you delete your account, or after a period of inactivity.
• When you delete your account we permanently erase your data within 30 days (after a 7-day window in which you can cancel).
• Security and audit logs are kept for up to 2 years.

Security

Bank access tokens are encrypted at rest, staff access requires two-factor authentication, and we maintain a written information-security program. [Counsel: confirm FTC Safeguards Rule language.]

Your choices and rights

• Download your data or delete your account at any time from your account settings.
• Disconnect any bank at any time.
• Depending on your state, you may have additional rights. [Counsel: state privacy law section.]

Contact

[Company legal name], [Postal address] · privacy@squirrelsmoney.com