Privacy Policy

This Privacy Policy explains how Entifold LLC ("Entifold", "we" or "us") collects, uses, shares and protects information when you use the Entifold website and app (the "Service"). If you have questions, email [email protected].

The short version

• We collect what we need to run Entifold: your account details, the financial data you choose to connect, and what you add yourself.
• We never sell your personal information, and we never use it for advertising.
• We share it only with the companies that help us run the Service, and with the people you invite to your workspaces.
• You can see, correct, export and delete your information.

Information we collect

Information you give us

• Account details: your name, email address and phone number.
• Sign-in details: your password (stored only as a one-way hash, which can't be turned back into your password), passkeys, and the settings for an authenticator app and its backup codes (stored encrypted).
• Preferences: such as your time zone, appearance and which alerts you want by email.
• What you add to Entifold: budgets, bills, subscriptions, savings goals, assets such as the value of a home or vehicle, notes, categories and category rules.
• Workspace details: workspace names, the people you invite (including their email addresses) and the roles you give them.
• Messages to us: anything you send when you contact support.

Information from your financial institutions

When you connect a financial institution, you do so through Plaid Inc. ("Plaid"). With your permission, Plaid gives us information about your accounts, including account names and types, the last few digits of account numbers, balances and credit limits, and transactions (such as the date, amount, merchant and category). We use this to show your balances, net worth, transactions, budgets, bills, subscriptions and reports, and to keep them up to date. We don't receive or store your sign-in details for your financial institution, or full account numbers.

Plaid's handling of your information is described in the Plaid End User Privacy Policy.

Information collected automatically

• Sign-in and device information: the IP address, browser and device for each signed-in session, and a record of devices you've signed in from before, so we can spot unusual sign-ins.
• Activity in workspaces: a log of important actions, such as who connected an account or changed a member's role.
• Error reports: technical details when something goes wrong, so we can fix it.

Payment information

Paid plans are billed through Stripe, Inc. ("Stripe"). Stripe collects and stores your card or other payment details; we don't. We keep a record of each workspace's plan, billing status and invoices.

How we use information

• To provide the Service: showing your finances, sending reminders and alerts, and running shared workspaces.
• To keep accounts secure: verifying your email and phone, two-step verification, spotting unusual sign-ins and preventing abuse.
• To bill for paid plans.
• To contact you about your account, security, billing and important changes to the Service.
• To answer your questions and support requests.
• To find and fix problems, and to improve the Service.
• To meet our legal obligations and enforce our Terms of Service.

We do not sell your personal information, share it for advertising, or use it to show you ads.

How we share information

With people in your workspaces

Everything in a workspace, including its connected accounts and transactions, can be seen by its members, according to their role. Your name and email address are visible to the other members of workspaces you belong to. Think carefully about who you invite.

With service providers

We use the following companies to run the Service. They may use your information only to provide their services to us.

• Plaid: connecting to your financial institutions.
• Stripe: payments and billing.
• Twilio: verification codes sent by text message.
• Amazon Web Services: hosting and data storage, in the United States.

For legal reasons

We may share information if we believe in good faith that the law requires it, or that it's needed to protect the rights, property or safety of Entifold, our users or others.

If our business changes

If Entifold is involved in a merger, acquisition or sale of assets, your information may be transferred as part of it. We'll tell you before your information becomes subject to a different privacy policy.

Cookies

The Entifold app uses cookies only to keep you signed in and to remember which workspace you're using. This website stores your light or dark theme choice on your device. We don't use advertising or tracking cookies.

How we protect information

Every connection to Entifold, and from Entifold to its database, is encrypted. Passwords are stored only as a one-way hash, and authenticator settings are encrypted. You can protect your account further with passkeys and two-step verification, and see and sign out every session. No system is completely secure, so please use a strong, unique password and tell us at once if you think your account has been misused.

How long we keep information

• We keep your information while your account is open.
• Disconnecting a financial institution deletes its accounts, balances and transactions from Entifold.
• When you delete your account, we delete your personal information and the workspaces you own, including their financial data, and remove you from other workspaces. Copies in our backups are deleted within 35 days.
• We keep billing records for up to 7 years, and records of actions in other people's workspaces, to meet legal, tax and accounting requirements and to resolve disputes.

Your choices and rights

• See and correct: you can view and update your details in your settings.
• Export: you can export your transactions, or ask us for a copy of your information.
• Delete: you can delete your account in your settings at any time.
• Emails: you can choose which alerts you get by email. Security and account emails can't be turned off.

Depending on where you live, you may have further rights, such as to know what personal information we hold about you, to have it deleted or corrected, or not to be treated differently for using these rights. To make a request, email [email protected] from the address on your account. We'll confirm who you are before acting, and reply within the time the law requires.

California residents

In the last 12 months we have collected the categories of information described above: identifiers (such as your name, email, phone and IP address), financial information, commercial information (such as your plan and billing history), internet activity (such as sign-in sessions) and inferences we make from your transactions (such as which payments are recurring). We use them only for the purposes above. We do not sell or share personal information for cross-context behavioral advertising.

Canadian residents

Your information is stored and processed in the United States, where it may be available to the authorities under US law. You can ask to see or correct your information, or withdraw your consent, by emailing [email protected]. Withdrawing consent may mean we can no longer provide the Service.

Children

Entifold is for people aged 18 and over. We don't knowingly collect information from anyone younger. If you believe a child has given us information, email [email protected] and we'll delete it.

Changes to this policy

We may update this policy. If we make important changes, we'll tell you by email or in the app before they take effect. The date at the top shows when it last changed.

Contact us

Entifold LLC
Privacy questions and requests: [email protected]
Anything else: [email protected]