# Bankable Privacy Policy

This Privacy Policy explains how Bankable collects, uses, shares, protects, and retains information when people use the Bankable application and related services.

- Effective date: May 13, 2026
- Contact: support@getbankable.ai

## Consent

- Bankable obtains user consent before collecting, processing, and storing information needed to provide the application.
- When a user connects a financial account through Plaid, the user is presented with Plaid Link and authorizes the specific financial institution connection and data-sharing permissions before Bankable receives Plaid data.
- By creating an account, using Bankable, uploading business records, inviting users, or connecting bank accounts, users direct Bankable to process that information for the purposes described in this Privacy Policy.
- Users may withdraw consent for future Plaid data collection by disconnecting the financial account or contacting Bankable support, subject to retention needed for legal, security, accounting, dispute-resolution, and backup purposes.

## Information We Collect

- Account information such as name, email address, authentication identifiers, company details, role, and workspace preferences.
- Business financial information provided by you or your authorized users, including budgets, transactions, accounts, vendors, forecasts, notes, files, and related operating records.
- Bank account and transaction information retrieved through Plaid after you authorize a connection, including account names, balances, institution metadata, transaction descriptions, dates, categories, merchant information, and transaction amounts.
- Usage, device, and security information such as browser type, IP address, event logs, error logs, session activity, and audit records used to operate and protect the application.

## Receipt Capture and On-device Recognition

- When you choose to scan or import a receipt, Bankable reads the image using on-device text recognition. The iOS app uses Apple Vision; browser receipt recognition uses a locally running OCR worker with recognition assets served by Bankable. Receipt images are not sent to a separate OCR service.
- You review the merchant, date, amount, currency, and any optional category or transaction link before confirming upload. Uploaded receipt images and recognized text are stored privately for authorized company users, with an audit record of receipt changes. Linking evidence does not automatically post a transaction.
- The iOS app can retain protected receipt drafts on your device while awaiting review or connectivity. These local drafts are excluded from device backups and are scoped to the account and company that captured them. Recognized fields may be inaccurate and require your review.
- Optional iOS voice questions use on-device recognition on supported devices and languages. Bankable does not store the audio or send it to a separate speech-recognition service in this flow. You can type a question instead.

## How We Use Information

- Provide the Bankable application, including financial modeling, bank transaction cleanup, benchmarking, reporting, capital package preparation, and account administration.
- Connect to Plaid and other service providers at your direction, retrieve authorized financial data, sync transactions, and maintain bank-connection functionality.
- Protect the service by authenticating users, enforcing role-based access, monitoring system activity, detecting misuse, investigating errors, and maintaining audit logs.
- Improve product quality, support customers, communicate service updates, and comply with legal, security, accounting, and operational obligations.

## Plaid Data

- Bankable uses Plaid so users can securely connect financial accounts and import business financial data into the application.
- Bankable does not sell Plaid data. Plaid data is used only to provide requested Bankable functionality, support user-authorized workflows, maintain security, and comply with applicable obligations.
- Plaid access tokens are handled server-side and encrypted before persistence. Bankable does not expose Plaid access tokens in the browser.
- Users may disconnect financial accounts or request deletion of Plaid-derived data by contacting Bankable support.

## How We Share Information

- With service providers that help us operate Bankable, such as hosting, database, authentication, payments, analytics, support, and bank-connectivity providers.
- With authorized members of your workspace based on their role and permissions.
- When required to comply with law, enforce agreements, protect rights and safety, investigate security issues, or complete a business transaction such as a merger or acquisition.
- We do not sell personal information or consumer financial data.

## Security

- Bankable uses HTTPS/TLS for data in transit and database encryption at rest for stored application data.
- Sensitive provider credentials are stored in server-side environment secrets and are not committed to source code.
- Bankable uses access controls, audit logs, security review practices, and vulnerability management procedures to reduce unauthorized access and operational risk.
- No internet service can guarantee absolute security, but Bankable maintains administrative, technical, and organizational safeguards designed for the nature of the data we process.

## Retention and Deletion

- We keep information for as long as needed to provide the service, comply with legal and accounting obligations, resolve disputes, enforce agreements, and maintain security records.
- Customers may request deletion of workspace data, account data, or Plaid-derived financial data, subject to legal, security, fraud-prevention, and backup-retention requirements.

## Your Choices

- You can choose not to connect a bank account through Plaid and may use manual workflows where available.
- You can request access, correction, export, or deletion of your personal information by contacting Bankable.
- You can unsubscribe from non-essential communications where those options are provided.

## Changes to This Policy

Bankable may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and provide notice as appropriate through the application or other reasonable means.

Canonical page: https://getbankable.ai/Privacy