Privacy Policy

Last updated: April 17, 2026

Verdant Finance ("we," "us," or "the Service") is a personal finance platform that helps you budget, track investments, and manage your net worth. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data.

1. Information We Collect

Account Information

When you create an account, we collect your email address and a password (hashed, never stored in plain text). We do not collect your name, address, phone number, or other personal identifiers unless you voluntarily provide them.

Financial Data via Plaid

When you connect a bank or brokerage account, we use Plaid Inc. to securely access your financial institution. Through Plaid, we receive:

• Account information -- account names, types (checking, savings, credit card, brokerage, retirement), and current balances
• Transaction history -- dates, payees, amounts, and merchant categories for up to two years of history
• Investment holdings -- ticker symbols, share quantities, cost basis, and end-of-day prices for connected brokerage and retirement accounts

We do not receive or store your bank login credentials. Plaid handles authentication directly with your financial institution. You can review Plaid's privacy practices at plaid.com/legal.

Investment Price Data

We use Finnhub to display real-time stock and ETF prices. Finnhub receives ticker symbols only -- no personal or financial account information is shared with Finnhub.

Data You Enter Manually

You may manually enter transactions, budget categories, investment holdings, tracking accounts (vehicles, real estate), and financial goals. This data is stored only in your account and is not shared with any third party.

Usage Data

We collect standard server logs (IP addresses, browser type, pages visited) for security monitoring and service improvement. We do not use third-party analytics or advertising trackers.

2. How We Use Your Information

We use your data solely to provide the Service:

• Display your transaction history and categorize spending
• Calculate budget balances, available amounts, and spending pace
• Sync bank account balances and detect new transactions
• Track investment holdings and display portfolio performance
• Calculate net worth across all your assets and liabilities
• Generate insights, reports, and financial health indicators
• Match scheduled transactions against bank imports
• Learn your payee-to-category preferences to auto-categorize future transactions

We do not sell, rent, or share your financial data with advertisers, data brokers, or any third party for marketing purposes. We do not use your data to make lending decisions, determine insurance eligibility, or for any purpose other than providing the Service to you.

3. How We Store and Protect Your Data

Storage

Your financial data is stored in an encrypted database on our servers. All data is associated with your user account and is not accessible to other users.

Encryption

• In transit -- all connections use HTTPS/TLS encryption
• At rest -- database storage is encrypted
• Plaid tokens -- access tokens for your bank connections are stored encrypted and are never exposed to the browser

Access Controls

Access to production systems is restricted to authorized personnel only. We use authentication on all API endpoints and verify Plaid webhook signatures using JWT verification to prevent unauthorized data injection.

4. Data Retention and Deletion

While your account is active

We retain your financial data for as long as your account is active and you maintain connected bank accounts. Transaction history is kept to support budget calculations, reports, and trend analysis.

Account deletion

You may delete your account at any time. When you delete your account:

• All your financial data (transactions, budgets, holdings, tracking accounts) is permanently deleted from our servers
• Your Plaid bank connections are revoked -- we call Plaid's item removal API to ensure your tokens are invalidated
• Server logs containing your IP address are retained for up to 90 days for security purposes, then deleted

Disconnecting a bank account

You can disconnect (unlink) individual bank accounts from Settings at any time. Disconnecting revokes the Plaid access token for that institution. Previously synced transactions remain in your account unless you manually delete them or the account.

5. Third-Party Services

We use the following third-party services to operate:

6. Your Rights

You have the right to:

• Access -- view all data we hold about you within the app
• Correct -- edit any manually entered data at any time
• Delete -- delete individual accounts, transactions, or your entire account
• Disconnect -- unlink any bank or brokerage connection at any time
• Export -- your transaction and holdings data is visible in the app and can be exported

To exercise any of these rights or ask questions about your data, contact us at tylerwkoontz@gmail.com.

7. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a prominent notice in the app. The "Last updated" date at the top reflects the most recent revision.

9. Contact

If you have questions about this Privacy Policy or our data practices, contact:
tylerwkoontz@gmail.com