Privacy Policy
This policy explains what information ChatMyBank collects, why we collect it, how we protect it, and the choices you have. We wrote it to be read, not skimmed. If anything is unclear, email us at support@chatmybank.com.
The short version. We access your bank account information, balances and transactions through Plaid, with your permission, and use that data only to provide ChatMyBank to you: answering your questions, sending the alerts you asked for, and serving your own API and MCP requests. Access is read-only. We never store your bank login credentials, never sell your data, and never share it with third parties for advertising. You can disconnect a bank or delete everything at any time.
1. Who we are
ChatMyBank is operated by 1557033 BC. LTD. ("ChatMyBank", "we", "us"), 1075 Sunset Drive, Unit 201, Kelowna, BC V1Y 6W5, Canada. We are the data controller for the personal information described in this policy. You can reach us at support@chatmybank.com.
2. What information we collect
2.1 Account information you give us
- Your email address and, if you choose to provide it, your name.
- Authentication details needed to sign you in (for example a password hash or a sign-in provider identifier). We never store passwords in plain text.
- Your preferences, such as which alerts you want and where you want them delivered.
- Delivery identifiers for alert channels you enable: an email address, a Telegram chat ID, or a Slack workspace and channel.
2.2 Financial data accessed through Plaid
When you connect a bank account, you do so through Plaid Inc. ("Plaid"). You sign in to your financial institution inside Plaid's interface or through your institution's own OAuth login page. Your online banking username and password are never sent to or stored by ChatMyBank.
With your authorisation, Plaid provides us with the following data from the accounts you choose to connect. We request only Plaid's Accounts, Balance, Transactions products:
| Data | Examples | Why we need it |
|---|---|---|
| Account information | Institution name, account name, account type and subtype (e.g. checking, savings, credit card), the last four digits of the account number, currency | To label your accounts so you and your agents know which account a question or alert refers to |
| Balances | Current balance, available balance, credit limit where applicable | To answer balance questions and to send low-balance alerts |
| Transactions | Date, amount, merchant name or description, category, pending status, payment channel | To answer spending questions, detect recurring subscriptions and unusual charges, and produce your weekly digest |
We do not request full account or routing numbers, identity documents, income verification, investment holdings, liabilities details, or any Plaid product that can initiate payments or transfers.
2.3 Information generated while you use the service
- The questions you ask in chat and the answers generated for you, so that you can see your history and so we can improve reliability.
- Alert history: which alerts were triggered and when they were sent.
- API keys you create (stored as a hash) and metadata about API and MCP requests such as the endpoint called, the time, and the response status. We do not log the financial data returned in those responses.
- Standard technical logs: IP address, browser type, device information, and timestamps, used for security and troubleshooting.
3. How we use your information
We use your information solely to provide, secure, support and improve ChatMyBank. Specifically, to:
- Retrieve and keep your account, balance and transaction data up to date.
- Answer the questions you ask about your money.
- Detect the conditions you asked to be alerted about and deliver those alerts to the channels you chose.
- Serve your data to the AI agents and applications you authorise through your personal API key or MCP endpoint.
- Protect the service and your account against fraud, abuse and unauthorised access.
- Respond to your support requests.
- Comply with legal obligations.
We do not sell your personal or financial data. We do not share it with third parties for advertising or marketing. We do not use it to build profiles for anyone other than you, and we do not use your financial data to train general-purpose AI models.
4. Plaid
Plaid is a separate company that facilitates the connection between ChatMyBank and your financial institution. When you use Plaid Link to connect an account, Plaid collects and processes your information under its own privacy policy. By connecting an account, you acknowledge that your information will be handled by Plaid in accordance with the Plaid End User Privacy Policy, and you grant ChatMyBank and Plaid the right to access, transmit and store information from your financial institution as described in this policy.
ChatMyBank stores the Plaid access token that identifies your connection. That token is encrypted at rest and is used only to fetch the data described in section 2.2. When you disconnect an account, we revoke the token with Plaid.
5. Service providers we rely on
We use a small number of service providers to run ChatMyBank. Each processes data only on our instructions, only as needed to deliver the service, and under contractual confidentiality and security obligations:
- Plaid, for bank connectivity (see section 4).
- Cloud hosting and database providers, to run the application and store your data.
- AI model providers, to interpret your questions and generate answers. When you ask a question, the relevant portions of your financial data are sent to the model provider to produce the answer. We use providers that contractually commit not to train on this data.
- Messaging providers (email, Telegram, Slack), to deliver the alerts you enable. The content of an alert is delivered through the channel you chose and is subject to that channel's own terms.
6. Your AI agents, API keys and MCP endpoint
ChatMyBank lets you expose your own data to tools you choose, such as Claude, ChatGPT, Cursor or a custom agent, through a personal API key or a hosted MCP endpoint. When you do this, you decide which third party receives your data, and that third party's privacy policy governs how it handles it. Access granted this way is read-only. You can view, rotate and revoke every key from Settings at any time; revoking a key immediately stops all access through it.
7. When we share information
Beyond the service providers listed above, we share personal information only:
- With third parties you explicitly direct us to share with (section 6).
- When required by law, subpoena or court order, or to protect the rights, safety or property of ChatMyBank, our users or others.
- In connection with a merger, acquisition or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.
8. Data retention
- While your account is active, we retain your financial data so that we can answer questions about past periods and detect recurring patterns.
- When you disconnect a bank account, we revoke the Plaid access token immediately and delete the account, balance and transaction data associated with that connection within 30 days.
- When you delete your ChatMyBank account, we revoke all Plaid access tokens and delete all of your personal and financial data within 30 days. Encrypted backups are purged within 90 days.
- We may retain minimal records (such as the fact that an account existed and was deleted, or security logs) where we are legally required to do so.
9. Your rights and choices
Regardless of where you live, you can:
- Disconnect any bank account from Settings at any time.
- Delete your entire account and all associated data from Settings, or by emailing support@chatmybank.com.
- Access or export the data we hold about you.
- Correct inaccurate account information.
- Turn off any alert or revoke any API key.
Depending on your jurisdiction (for example under the GDPR, UK GDPR or the California Consumer Privacy Act), you may have additional rights, including the right to object to or restrict certain processing and the right to lodge a complaint with a supervisory authority. To exercise any right, email support@chatmybank.com. We will respond within 30 days and will never discriminate against you for exercising your rights.
10. Security
We protect your data with encryption in transit (TLS) and at rest, encrypted Plaid access tokens, hashed API keys, least-privilege access controls and monitoring. Bank credentials never touch our systems. A fuller description is on our Security page. No system is perfectly secure; if you believe your account has been compromised, contact us immediately at security@chatmybank.com.
11. International transfers
Your data may be processed in countries other than the one you live in, including the United States, where our service providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses.
12. Children
ChatMyBank is not directed to, and may not be used by, anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
13. Cookies
This marketing website does not use advertising or tracking cookies. The ChatMyBank application uses strictly necessary cookies or tokens to keep you signed in.
14. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or by a notice in the application before the changes take effect. The effective date at the top of this page tells you when it was last revised.
15. Governing law
This policy and any dispute arising from it are governed by the laws of the Province of British Columbia, Canada, without regard to conflict-of-law principles.
16. Contact us
Questions, requests or concerns about privacy: support@chatmybank.com
Security issues: security@chatmybank.com
Post: 1557033 BC. LTD., 1075 Sunset Drive, Unit 201, Kelowna, BC V1Y 6W5, Canada