Know what you'll spend
before you do.

What Data We Access

When you connect your bank account through Plaid, Monaith accesses your transaction history for the purpose of generating spending analysis and behavioral insights. We access:

• Transaction history (merchant names, amounts, dates, categories)
• Account balances (to calculate net position and cash flow)
• Account and routing identifiers (for secure connection only)

We do not access your bank login credentials. Plaid handles authentication directly with your financial institution using bank-level encryption. Monaith never sees your username or password.

How We Use Your Data

Your financial data is used solely to provide the Monaith service to you. Specifically:

• To generate your plain-English spending snapshot and analysis
• To detect spending patterns and recurring subscriptions
• To calculate goal alignment and provide predictive nudges
• To improve the accuracy of transaction categorization over time

We do not use your data for any purpose other than providing and improving the Monaith service for you.

What We Will Never Do

• We will never sell your personal or financial data to third parties
• We will never share your data with advertisers or data brokers
• We will never use your data to make lending or credit decisions about you
• We will never access your data for any purpose you have not authorized
• We will never store your bank login credentials

Security Measures

Monaith implements the following security safeguards to protect your data:

• All data is encrypted in transit using TLS 1.2 or higher
• All data is encrypted at rest using AES-256 encryption
• Bank connections are established through Plaid, which is SOC 2 Type II certified and ISO 27001 and ISO 27701 certified
• Access to production data is restricted to authorized personnel only, using role-based access controls
• We conduct regular security reviews of our application and infrastructure
• Authentication tokens from Plaid are stored securely and never exposed to the client

Bank Connection via Plaid

Monaith uses Plaid Inc. to securely connect to your financial institution. Plaid is a regulated financial data network used by over 8,000 financial institutions and trusted by services including Venmo, Robinhood, Coinbase, and Betterment. When you connect your bank through Monaith:

• You authenticate directly with your bank through Plaid's secure interface
• Plaid uses OAuth where supported by your bank, meaning your credentials are never shared with Monaith or Plaid
• Plaid provides read-only access to your financial data. Neither Plaid nor Monaith can move money, initiate transfers, or modify your accounts
• You can view and manage your Plaid connections at any time through the Plaid Portal at my.plaid.com

For more information about how Plaid handles your data, please see Plaid's End User Privacy Policy at plaid.com/legal.

Your Rights and Controls

You are in control of your data at all times:

• You can disconnect your bank account at any time from within Monaith or through the Plaid Portal
• You can request a complete export of all data Monaith holds about you
• You can request deletion of your account and all associated data at any time by contacting us
• Upon account deletion, all personal and financial data is permanently removed from our systems within 30 days, except where retention is required by law
• You can revoke Monaith's access to your financial data at any time, and we will stop accessing new transaction data immediately

Data Retention

We retain your transaction data and analysis only for as long as your account is active and as needed to provide the Monaith service. If you delete your account, we permanently delete all personal and financial data within 30 days. Anonymized, aggregated data that cannot be used to identify any individual may be retained for product improvement purposes.

Compliance

Monaith is designed to comply with applicable data protection and financial data regulations, including:

• The Gramm-Leach-Bliley Act (GLBA) requirements for safeguarding consumer financial information
• The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) requirements for California residents
• The Consumer Financial Protection Bureau (CFPB) Section 1033 requirements for consumer-authorized financial data access
• Plaid's Developer Policy requirements for secure handling of end user data