Privacy Policy

Who we are

myCFO is a personal finance workspace operated by Ascend Minds Solutions LLC. This policy covers the myCFO web app, its API routes, and any deployment of this build. It explains what we collect, why we collect it, and the choices you have.

Data you give us

We collect the details needed to run your workspace:

• Account details: your email address, a password handled by our authentication provider, and the name and contact details you enter during onboarding.
• Workspace data: accounts, balances, transactions, holdings, goals, documents you upload, and the prompts and answers in chat, research, and radar.
• Support messages: whatever you send us when you ask for help or delete your account.
• Sign-in security metadata: when you sign in, we keep a coded summary of your browser type, operating system and a shortened network address so we can email you about sign-ins from an unfamiliar browser or network. We never store your full IP address or browser string, and we delete this summary 180 days after you last sign in that way. Security events are kept for 13 months.

Data from connected institutions

When you connect an institution, myCFO receives read-only data from Plaid: account names, balances, masks, transactions, investment holdings and transactions, and loan details. myCFO stores an encrypted Plaid access token so it can keep syncing. myCFO never sees or stores your bank username or password. Disconnecting removes myCFO's access at Plaid and deletes the synced data unless you choose to keep it as read-only history.

Plaid handles that data under its own end-user privacy policy. Read the Plaid end-user privacy policy.

AI clients and bring your own AI

AI MCP: if you connect an MCP-capable AI client, that client reads from Plaid and sends normalized balances, transactions, and holdings to your workspace. The client runs the schedule, and its own privacy policy covers what it keeps.

BYOAI: if you connect an AI provider, your prompt and a summary of your workspace are sent through the myCFO server proxy to the provider you chose. That provider's terms and privacy policy apply to the request. When the key is stored in the cloud it is encrypted with AES-256-GCM and decrypted only while a request is in flight. Without BYOAI or myCFO AI, Chat, Research, and Radar use local templates or computed workspace facts and do not send your prompt to an AI model provider.

Automated processing

myCFO uses code and AI to categorize transactions, find patterns, write insights and suggestions, and answer questions. This output is informational. myCFO does not make decisions about you that have legal or similarly significant effects, such as approving credit. You can correct a category, dismiss an insight or suggestion, and report an answer you think is wrong.

myCFO AI

myCFO AI is off until you turn it on and accept the current AI notice in Settings. While it is on, the prompt you send, a short recent conversation history, and a summary of your workspace (such as account balances, holdings, transactions, goals, and your first name) are sent through the myCFO server to an AI model provider to generate an answer.

When an answer needs current public information, such as today's mortgage rates or market news, myCFO AI may send a short search query to Tavily, a web search service, and read the public results. The query is written from public terms only and never includes your name, account names, balances, transactions, or other figures. Tavily may keep search queries, use them to improve its service, and share them with the search index providers it works with. Answers that used public sources are labeled and link to those sources. myCFO may also read public government data, such as Treasury yields and inflation figures, which involves sending no information about you.

We use AI model providers that we list in the app when their accounts are active. The provider we use may change, and we update this page and the in-app notice when it does.

Our vendor review records each provider's retention terms for our account. We ask providers for zero data retention or the shortest retention they offer, and we do not claim that a provider keeps no data unless that review shows it for our account. We do not use your data to train our own models or allow our AI providers to train theirs, where their terms let us choose that.

When suggestions are on, myCFO picks questions from your own data, such as a spending change, an upcoming bill or a holding that moved. To word them, we send the AI provider short facts about each one (for example a category name and up to four amounts), never your full workspace, account numbers or past questions.

You can turn myCFO AI off in Settings at any time. The next request stops sending data to an AI model provider. Turning it off does not delete answers already saved in your workspace; use the normal delete controls for those.

Service providers

These providers process data only to deliver their service to us:

• Supabase: database, authentication, and file storage.
• Vercel: application hosting and request logs.
• ZeptoMail: transactional email such as confirmation, reset, and welcome messages.
• Plaid: institution connections and the account data they share.
• Anthropic and OpenCode, the AI model providers for myCFO AI: process the prompt, short history, and workspace summary only after you turn it on.
• Tavily: web search for myCFO AI answers that need current public information. It receives only a short public search query, with no name, account, or figures, and only after you turn myCFO AI on.
• Stripe: payments and subscription billing, when you buy a plan. Stripe receives your payment details directly; myCFO never sees your full card number.
• Google: sign-in with Google when you choose it, and speech generation for the daily briefing (the briefing text, not your account details).
• Vercel Web Analytics: page view counts.

What we do not do

We do not sell your personal information, share it for targeted advertising, or use advertising pixels. We do not use your data to train our own AI models. What our AI and search providers may keep is described in the myCFO AI section. myCFO never moves money, and every institution connection is read-only.

Your privacy rights

Depending on where you live, including California, Colorado, Connecticut, Virginia, Texas and other states with privacy laws, you may have the right to know what personal information we hold, get a copy, correct it, delete it, and opt out of its sale, sharing for targeted advertising, or profiling. Most of these you can do yourself in Settings. For anything else, email support@mycfoiq.com. We verify the request against your account, answer within 45 days, and won't treat you differently for using these rights. If we decline, you can appeal by replying to our answer, and we will respond within 60 days. An authorized agent can make a request for you with your signed permission.

Retention and deletion

Retention periods: workspace data and chats are kept until you delete them or your account. Deleting your account (when account deletion is enabled) removes them at once, except for the consent record and the deletion audit row, which we keep for as long as we need to show what was agreed and when.

We keep your workspace until you delete it. The controls in the app are:

• Disconnect an institution: removes myCFO's access at Plaid and deletes the synced rows, or keeps them as read-only history when you pick that option.
• Clear synced data: deletes rows that came from a connection and keeps the rows you entered yourself.
• Clear everything: deletes your financial workspace and keeps the profile details that identify the account owner.
• Delete account (Settings > Security, when account deletion is enabled): permanently deletes your account and workspace data: profile, workspace data, connected banks and their history, AI keys, chats, files, alerts, and subscription. It removes bank access at Plaid and keeps only a record of what you agreed to and when, without your financial data, plus the deletion audit row. Backups age out with the provider's retention.
• Browser cache: the app caches your workspace locally. Clearing site data in your browser removes that copy.
• Workspace data and chats: kept until you delete them or your account.
• Consent record and deletion audit row: kept for as long as we need to show what was agreed and when.
• Payment records: kept by Stripe under its own policy.
• Server request logs: kept only as long as our host keeps them.
• Backups: age out with our database provider's retention.
• Suggestion click events: deleted after 60 days.

Security

Plaid access tokens are encrypted at rest with AES-256-GCM. MCP sync tokens are stored as SHA-256 hashes, and internal ingest functions are callable only by the server role. User tables are protected with row level security, so one account cannot read another account's rows.

Two-step verification is optional. When you turn it on, myCFO asks for a code from your authenticator app when you sign in and again before sensitive actions such as connecting a bank. Supabase Auth stores the authenticator secret and the backup recovery-code hashes stay in a server-only table; myCFO never stores or logs the codes themselves.

Sessions end after 24 hours, or after an hour without activity.

No system is perfectly secure. If you think your account is compromised, change your password and contact us.

If a security incident affects your personal information, we will notify you and any regulator as the law of your state requires.

Cookies and analytics

myCFO uses cookies and browser storage that are needed to sign you in and keep your workspace on your device. We use Vercel Web Analytics to count page views. It does not use cookies and does not build a profile of you across sites.

Children

myCFO is for adults. It is not directed to anyone under 18, and we do not knowingly collect data from children.

Changes to this policy

When this policy changes we update this page and the date at the top. Material changes will also be noted in the app.

Contact

Questions about this policy or your data: support@mycfoiq.com.