Privacy Policy

Effective July 14, 2026

Praesco ("Praesco", "we", "us") is a personal finance service at praesco.io that reads the financial accounts you choose to connect and returns ranked, dollar-quantified recommendations. This policy explains what we collect, how we use it, and the choices you have. It applies to the Praesco web application, the waitlist, and the public demo. Praesco is currently operated by its founder; a Delaware corporation ([ENTITY LEGAL NAME]) is in formation and this policy will be updated to name it once formation completes.

This policy also serves as our privacy notice for purposes of the Gramm-Leach-Bliley Act (GLBA), which governs how financial services handle nonpublic personal information.

1. Information we collect

Account information. Your email address and a unique account identifier, used to create and secure your account.
Financial data you connect. When you link a financial institution through Plaid, we receive account details, balances, transactions, liabilities (such as credit card APRs and balances), and investment holdings. You enter your bank credentials directly with Plaid; your credentials never touch Praesco's servers.
Financial data you enter manually. Assets, holdings, budget targets, labels, and notes you add yourself.
Chat messages. Questions and messages you send to the Praesco assistant, processed together with your financial context to generate answers.
Usage and app state. How you interact with recommendations (for example marking one done or snoozing it), settings, and preferences, so the product can stay in sync across your devices.
Log data. Standard technical logs (IP address, browser type, request metadata) generated by our infrastructure for security and reliability.

The public demo at praesco.io/demo runs entirely on fictional persona data and connects to no real accounts.

2. How we use your information

To provide the service: analyze the balance sheet you connect and generate ranked recommendations.
To personalize what you see, using your own data and history.
To secure accounts, prevent fraud and abuse, and debug problems.
To communicate with you about your account, and, only if you opt in, to send the email digest of your recommendations.

What we never do. We do not sell your data. We do not show ads. No financial institution, lender, or product provider pays us to recommend anything; our only revenue is the subscription you pay. Your data is never used to train a shared or third-party AI model.

3. Service providers

We use a small set of service providers to run Praesco. Each receives only what its function requires and processes it on our behalf.

Provider	Purpose	Data involved
Plaid	Connects your financial institutions	Your credentials go directly to Plaid; Plaid returns account, balance, transaction, liability, and investment data to us. Plaid's handling of your data is described in the Plaid End User Privacy Policy.
Supabase	Authentication and data storage	Your email, account identifier, and the encrypted application data described above.
Anthropic	Powers the in-app Praesco assistant and analysis	The financial context you connect (balances, transactions, holdings) and the messages you send in chat, transmitted to the Anthropic API to generate responses. Anthropic processes this data as our service provider under its Commercial Terms of Service and Data Processing Addendum, deletes API inputs and outputs within 30 days, and does not use them to train its models.
Netlify	Hosting and serverless infrastructure	Standard request logs (IP address, request metadata).
Yahoo Finance	Market price quotes	Ticker symbols only; no personal data is sent.
Finnhub	Market data	Ticker symbols only; no personal data is sent.
Logo.dev	Institution and merchant logos	Your browser fetches logo images directly; like any content network, Logo.dev sees the requesting IP address. No account or financial data is sent.

Providers may retain data longer where required by law or to detect and prevent abuse. We do not share your personal information with any third party for their own marketing or advertising.

4. How your data is protected

We maintain a written information security program consistent with the GLBA Safeguards Rule. Concretely: all data moves over encrypted connections (TLS); financial institution access tokens are encrypted at rest with AES-256-GCM; access to your data requires your authenticated session, and multi-factor authentication is available on every account; our serverless functions derive your identity only from your verified login token.

5. Data retention

We keep your data for as long as your account exists so the product can do its job, which is analyzing your financial history. When you delete your account, your data is removed from our production systems, and we instruct our service providers to delete it under their terms. Log data is retained on short infrastructure-defined cycles.

6. Your choices and rights

Export. You can export your data as CSV files from inside the app at any time.
Disconnect. You can disconnect any linked institution from inside the app.
Delete your account. You can delete your account and its data from inside the app (Settings). If you prefer not to log in, email privacy@praesco.io from your account email and we will process the deletion.
Digest opt-out. The email digest is off unless you opt in, and you can opt out at any time.

California residents. You have the right to know, correct, and delete the personal information we hold about you. We do not sell or share personal information as defined by the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. To exercise any right, use the in-app tools above or email privacy@praesco.io. We will not discriminate against you for exercising your rights. Some financial data we handle is regulated under the GLBA and is exempt from certain CCPA provisions; where that is the case, this policy and the GLBA govern its treatment.

7. Children

Praesco is not directed to anyone under 18, and we do not knowingly collect information from anyone under 18.

8. Changes to this policy

If we make material changes, we will update the effective date above and notify you by email or in the app before the changes take effect.

9. Contact

Questions or requests: privacy@praesco.io.