Privacy Policy

1. Overview

Portal Finance Inc. ("Portal Finance", "we", "us", or "our") operates the Portal Finance web application (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the collection and use of information as described here.

2. Information We Collect

We collect the following categories of information:

• Account information — your name and email address, provided when you sign up via our authentication provider (Clerk).
• Financial account data — account names, types, and balances from institutions you choose to connect.
• Transaction data — transaction descriptions, amounts, dates, categories, and merchant names from connected accounts.
• Manually entered data — accounts, transactions, budgets, and notes you add directly within the app.

We do not collect or store your bank login credentials. When you connect a bank account, your credentials are entered directly into Plaid or Mastercard Open Banking — we only receive a secure access token in return.

3. How We Collect It

• Directly from you — when you create an account, manually add accounts or transactions, or set budgets.
• Through Plaid — when you connect a bank account using Plaid Link. Plaid's privacy policy is available at plaid.com/legal.
• Through Mastercard Open Banking — when you connect a bank account using Mastercard Open Banking (powered by Finicity). Their privacy policy is available at mastercard.us/privacy.

4. How We Use Your Information

We use your information solely to provide and improve the Service:

• Display your net worth, account balances, and transaction history
• Calculate spending breakdowns and budget progress
• Sync updated transaction and balance data when you request it
• Generate net worth snapshots over time

We do not sell your data, share it with advertisers, or use it for any purpose beyond operating the Service.

5. How We Protect Your Data

• All data is stored in a PostgreSQL database hosted by Supabase, with row-level security ensuring each user can only access their own data.
• Bank access tokens are encrypted at rest using AES-256-GCM encryption before being stored.
• All data is transmitted over HTTPS.
• The Service is hosted on Vercel. Their security practices are described at vercel.com/security.

6. Third-Party Services

Portal Finance uses the following third-party services to operate:

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data — including linked accounts, transactions, budgets, and snapshots — is permanently deleted within 30 days. You may also request deletion of specific data at any time by contacting us.

8. Your Rights & Data Deletion

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Disconnect any linked bank account at any time from within the app

To request account deletion or exercise any of these rights, email us at privacy@portalfinance.io.

9. Children's Privacy

Portal Finance is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For significant changes, we will notify users via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: