Privacy Policy

1. Who is responsible for your information

Monvo is responsible for the personal information in our care, including information we transfer to service providers for processing. If you have questions or concerns, you can reach our privacy contact at team.monvo@gmail.com.

2. What information we collect

We collect only what we need to provide Monvo.

Account information you give us: your name and email address when you create an account, plus authentication information used to secure your Monvo account.

Financial data you choose to connect: transaction history, balances, and account details such as account type and the last four digits of the account number through Plaid. When you upload a financial statement, we extract transaction details from the document.

We never collect your banking username or password. When you connect a bank, you log in directly through Plaid's secure interface. Monvo never sees, receives, or stores your banking credentials.

Technical information: basic device and usage information needed to operate the service and keep it secure.

3. Why we collect it

We collect and use your information to create and secure your Monvo account, display your accounts, balances, and transactions, generate insights, operate the service, communicate with you about the service, and meet legal and security obligations.

We will not use your information for a new purpose without your consent, unless permitted or required by law.

4. How we get your consent

Before you connect any account, we show a clear notice explaining what Monvo will read and confirm that we never store your banking password.

By connecting an account or uploading a statement, you consent to Monvo reading and processing that data for the purposes in this policy.

You can withdraw your consent at any time by disconnecting an account or deleting your data. Withdrawing consent may limit or end your ability to use parts of Monvo.

5. What we do not do

We do not move, hold, or transfer your money. Monvo is read-only.

We do not collect or store your banking login credentials.

We do not use screen scraping.

We do not sell your personal information.

We do not share your financial data with advertisers.

6. How long we keep your information

Uploaded statements: the original document is deleted immediately after we extract the transaction details. We keep only the structured transaction data, not the original file.

Connected account data: we keep your transaction and balance data while your account is connected. When you disconnect an account, we delete the associated access token and the data tied to that connection.

Account information: we keep your account information while your Monvo account is active. When you delete your account, we delete your personal information, except where we must keep limited records to meet a legal obligation.

7. How we protect your information

We use safeguards appropriate to the sensitivity of financial data, including encryption in transit and at rest, encrypted access tokens, server-only token use, access controls, last-four-only account identifiers, and multi-factor authentication availability.

No method of storage or transmission is completely secure, but we work to protect your information and respond quickly if a problem occurs.

8. Your choices and rights

You can access, correct, disconnect, delete, or withdraw consent for your information, subject to legal limits and the effect on the service.

Use the controls in the app or contact us at the email in Section 12. We will respond within the timeframe required by law.

9. Service providers and where data is processed

Plaid connects your bank accounts and provides transaction and balance data. Plaid handles your bank login securely. Monvo never receives your credentials.

Supabase provides database and authentication infrastructure. Vercel provides hosting.

Anthropic processes extracted statement text so Monvo can turn statement PDFs into structured transactions. We send only the statement text needed for extraction, not Plaid tokens or banking credentials.

Some providers may process or store information outside Canada, including in the United States. Information processed in another country may be subject to that country's laws.

10. Automated insights

Monvo generates insights such as spending categories, subscription detection, and suggestions. These are informational only. Monvo provides information, not financial, investment, tax, or legal advice. You are responsible for decisions you make using Monvo.

11. Changes to this policy

We may update this policy as Monvo evolves or as the law changes. If we make a material change, we will notify you through the app or by email. The Last updated date at the top shows when the policy was last revised.

12. How to contact us

Monvo Privacy Contact. Email: team.monvo@gmail.com

If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or 1-800-282-1376.

This policy is provided in good faith to reflect Monvo's practices and PIPEDA's principles. It is not legal advice. Before scaling beyond an initial test group, have it reviewed by a qualified Canadian privacy lawyer.