Plaid Privacy Policy
Who we are
Rivers' Legacy Creator ("RLC", "the app") is a private financial management application operated by The Rivers' Edge Group LLC (dba Noir Capital), Newcastle, Oklahoma. Contact: jrivers@riversedgecountertops.com.
What we collect
When you connect a bank account through Plaid, we receive account names, types, masked account numbers, balances and transaction history for the accounts you choose to link. We also store financial documents you upload and notes you write in the app. We never receive or store your bank username or password; those are entered only in Plaid's secure interface.
How we use it
To display your accounts and transactions, categorize them, build reports, forecasts and goals, send the account owner a daily summary email, and, if you use the AI advisor, to answer your questions about your own numbers. We do not sell or rent your data and do not use it for advertising.
Who we share it with
Plaid, Inc., which connects to your bank on your behalf under Plaid's own privacy policy (plaid.com/legal).
Anthropic, PBC, which provides AI features. Text we send has account, card and routing numbers, email addresses, phone numbers, Social Security and tax ID numbers, and login details removed. If you ask the AI to read a photo or scanned document, the full image of that document is sent.
Resend, which delivers the daily summary email to the account owner. That email includes financial figures such as balances and goals.
Microsoft, which stores backup copies of the app's data in OneDrive, protected by Microsoft's storage encryption. Bank connection tokens inside those backups are separately encrypted by us.
Cloudflare, which carries the app's internet-facing connections and forwards bills emailed to the app.
DigitalOcean, which hosts the server the app runs on.
We do not share your data with anyone else.
How we protect it
The app runs on a private cloud server hosted by DigitalOcean. The app itself is reachable only over a private, encrypted network. The only parts open to the internet are the address Plaid uses to send account updates, the page your bank returns you to after signing in, and the address that receives forwarded bill emails, all of which run through an encrypted Cloudflare tunnel. Bank connection tokens are encrypted at rest with AES-256. All communication with service providers is encrypted in transit. Access to the app requires a password and a second authentication factor.
How long we keep it
We keep bank accounts and transaction history with no automatic deletion date. They cannot be deleted in the app; they are deleted on request (see Your choices). Documents, project files and notes can be deleted in the app at any time. Statement files from imports that fail or are discarded are deleted automatically after 30 days. Backup copies may keep data you delete in the app until those backups are cleaned up as described below.
Your choices
You can disconnect any bank at any time in the app. This deletes its access token, tells Plaid to revoke access, and stops further data collection. Account and transaction history already collected is kept. You can request deletion of all your data, including account and transaction history and backup copies, by contacting the address above; we act within 30 days.
Changes
Changes to this policy will be posted at this address with a new "last updated" date.