plaid-whisperer Privacy Policy

Owner: Carter Pape
Effective: 2026-05-15
Review cadence: annually, or on material change

Who this covers

plaid-whisperer is a personal, non-commercial utility operated by Carter Pape. It uses Plaid to retrieve financial data for accounts that the operator and household members explicitly connect. It is not offered to the public; the only data subjects are the operator and consenting household members.

What data is collected 📋

• From Plaid: financial-account data the user connects via Plaid Link — account and routing numbers, balances, transactions, account-holder identity, and related metadata.
• Credentials: Plaid client ID/secret and Plaid access tokens (these authorize data retrieval; they are operator secrets, not collected from users).
• We do not collect analytics, advertising identifiers, or location data, and we do not use third-party trackers.

How data is used 🎯

Solely to generate the operator’s own personal-finance outputs (e.g. the monthly Venmo-card summary, HSA-reimbursement tracking, monthly analytics). Data is never sold, rented, or shared for advertising, and is not disclosed to any third party except Plaid (as the data source) and the infrastructure the operator uses to run the tool.

How data is stored & protected 🔒

• Secrets are held in an OS keychain or secrets manager, never in source control.
• Access requires MFA-protected accounts under the operator’s Access Control Policy.
• Retained and deleted per the operator’s Data Retention & Deletion Policy.

(The operator maintains the Access Control Policy and a Data Retention & Deletion Policy. These are not published, but data subjects may request a copy at the contact email below.)

Your rights 🪪

Because data subjects are the operator and household members, any subject may, at any time, request that their connected accounts be disconnected and their data deleted. Disconnection is performed in Plaid Portal and local deletion per the retention policy. Plaid’s own handling of consumer data is described at https://plaid.com/legal/.

Contact

Questions or deletion requests: [email protected].

Changes

Material changes are reflected by updating the Effective date above and the published copy.