Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account information: your name and email address when you create an Oversikt account
• Budget preferences: budget amounts, category configurations, and financial goals you set within the app
• Manual entries: any income, expense, or account information you enter manually

1.2 Information We Collect Through Plaid

When you choose to connect a bank account, we use Plaid, Inc. (“Plaid”) to securely access your financial data. Through Plaid, we receive:

• Account information: account name, type (checking, savings, credit card), and current balance
• Transaction data: transaction date, amount, merchant name, and category
• Recurring transaction patterns: information about recurring charges and deposits identified by Plaid

Important: We never receive, see, or store your bank login credentials. Plaid handles all direct authentication with your financial institution. We receive only read-only access to account and transaction data.

1.3 Information Collected Automatically

• Usage data: how you interact with the app (pages visited, features used) to improve the product
• Device information: browser type and operating system for compatibility and troubleshooting
• We do not use tracking cookies for advertising. We do not sell your data. We do not serve ads.

2. How We Use Your Information

We use your information solely to provide and improve Oversikt. Specifically:

We do not use your financial data for any purpose other than providing Oversikt's services to you. We do not use your data to build advertising profiles, sell to third parties, or make lending or credit decisions.

3. How We Share Your Information

We do not sell, rent, or trade your personal information.

We share data only in the following limited circumstances:

3.1 Plaid

We use Plaid to connect to your financial institutions. When you connect an account, Plaid's own privacy policy governs how they handle your bank credentials and the data they access on our behalf. You can review Plaid's privacy policy.

3.2 Infrastructure Providers

Your data is processed and stored using third-party infrastructure providers (such as our hosting provider and database service). These providers process data solely on our behalf, under contract, and do not have independent rights to use your data.

3.3 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or if necessary to protect the rights, safety, or property of Oversikt, our users, or the public.

4. Data Storage and Security

• All data in transit is encrypted using TLS 1.2 or higher (HTTPS on all connections)
• All data at rest is encrypted using AES-256 encryption on our managed database infrastructure
• API keys and secrets are stored as encrypted environment variables, never in source code
• Database access is restricted to application-level connections with no public endpoint
• We use multi-factor authentication on all systems that store or process your data
• We maintain an automated test suite and follow secure development practices

For more detail, see our Information Security Policy and Access Controls Policy, available upon request.

5. Data Retention

We retain your data only as long as you maintain an active Oversikt account. Specifically:

• Transaction data: retained for as long as your account is active, to power budgeting and trend analysis
• Budget settings and preferences: retained for as long as your account is active
• Category learning data: retained for as long as your account is active to improve categorization accuracy
• Usage logs: retained for up to 90 days for troubleshooting and product improvement, then deleted

6. Your Rights and Choices

You have control over your data at all times:

6.1 Access Your Data

You can view all data Oversikt holds about you directly within the application, including all transactions, account balances, and budget settings.

6.2 Disconnect Accounts

You can disconnect any linked bank account at any time from within the app. Disconnecting revokes Plaid's access token immediately and stops all future data syncing from that account.

6.3 Delete Your Account

You can request deletion of your account and all associated data at any time. Upon deletion:

• All Plaid access tokens are revoked immediately
• All your personal data (transactions, balances, budgets, preferences, category mappings) is permanently deleted within 30 days
• Backups containing your data are purged on the same schedule

To request account deletion, contact us at the email address listed in Section 10.

6.4 Export Your Data

You can export your transaction and budget data from within the application in standard formats (CSV).

6.5 Correct Your Data

You can update your account information, recategorize transactions, and modify budget settings at any time within the app.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know: You can request a detailed description of the personal information we have collected about you.
• Right to delete: You can request deletion of your personal information (see Section 6.3).
• Right to opt-out of sale: We do not sell your personal information. There is nothing to opt out of.
• Right to non-discrimination: We will not treat you differently for exercising your privacy rights.

To exercise these rights, contact us using the information in Section 10. We will respond within 45 days.

8. Children's Privacy

Oversikt is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice in the application before the changes take effect. Your continued use of Oversikt after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how your information is handled, contact us at:

Oversikt
Email: gavinarnold1@gmail.com

We aim to respond to all privacy-related inquiries within 30 days.

11. Plaid End-User Data Policy

This section specifically addresses how Oversikt handles data received through the Plaid API, in compliance with Plaid's developer requirements:

• We use Plaid data only to provide Oversikt's budgeting, spending analysis, and financial intelligence features to you.
• We do not sell, lease, or distribute Plaid data to any third party for their own purposes.
• We do not use Plaid data for marketing, advertising, or building consumer profiles for any purpose other than providing our services to you.
• We retain Plaid data only for as long as necessary to provide our services and fulfill the purposes described in this policy.
• We apply the same security protections to Plaid data as to all other sensitive data in our systems (encryption in transit and at rest, access controls, secure development practices).
• You can revoke our access to your financial data at any time by disconnecting your accounts within the app or by contacting us to delete your account.