Privacy Policy

1. Overview

Echelon ("we," "us," or "our") is an AI-powered bank monitoring service operated by Genesis Technology. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using Echelon you agree to the practices described here.

2. Information We Collect

• Account information: Email address and authentication credentials when you sign up.
• Financial data: Bank account names, balances, and transaction history obtained via Plaid with your explicit authorization.
• Usage data: Pages visited, features used, and interaction logs to improve our service.
• Preferences: Stewardship goals and anomaly alert thresholds you configure.

3. How We Use Your Information

• Provide AI-powered insights and anomaly alerts based on your transaction history.
• Send email notifications when unusual spending patterns are detected.
• Process subscription billing through Stripe.
• Improve our AI models and overall service quality.
• Comply with legal obligations.

4. Plaid Integration

We use Plaid Technologies, Inc. to connect to your financial institutions. By connecting your accounts you agree to Plaid's End User Privacy Policy. We receive read-only access to your account and transaction data. We do not store your bank login credentials.

5. Data Sharing

We do not sell your personal or financial data. We share data only with:

• Plaid — to retrieve your bank data on your behalf.
• Supabase — our database provider, which stores your data in encrypted form.
• Stripe — to process subscription payments.
• Resend / email providers — to deliver alert emails you have opted into.
• Law enforcement or regulatory authorities when required by law.

6. Data Retention

Transaction data is retained for as long as your account is active or as needed to provide our service. You may request deletion of your account and associated data at any time by contacting us. Plaid access tokens are revoked upon account disconnection.

7. Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. No method of transmission over the internet is 100% secure; however, we strive to use commercially acceptable means to protect your data.

8. Your Rights

Depending on your location, you may have rights to:

• Access and receive a copy of your personal data.
• Correct inaccurate data.
• Delete your data and account.
• Disconnect your financial accounts at any time via the Echelon dashboard.
• Opt out of email alerts via the unsubscribe link in any alert email.

9. Children's Privacy

Echelon is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice in the application. Continued use of Echelon after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at privacy@genesistechnology.io.