Privacy Policy

Last updated: March 28, 2026

This Privacy Policy describes how Moneyline ("we," "us," or "our") collects, uses, and protects your personal information when you use the Moneyline website, application, and services (the "Service"). We are committed to protecting your privacy and handling your financial data with the utmost care.

1. Information We Collect

Information you provide

  • Account information: Email address, first name, and last name when you sign up
  • Financial data: Account balances, transactions, trades, holdings, and other financial information you manually enter or import
  • Uploaded documents: Bank statements, trade confirmations, and other financial documents you upload for AI-powered parsing
  • Budget data: Income, expenses, savings goals, and budget categories

Information collected automatically

  • Usage data: Pages visited, features used, and interactions with the Service
  • Device information: Browser type, operating system, and device identifiers
  • Log data: IP address, access times, and referring URLs

Information from third parties

  • Plaid: When you connect accounts via Plaid, we receive account balances, transaction history, and account metadata as authorized by you
  • Alpaca Markets: Market data, security prices, and historical pricing information (this is public market data, not personal information)

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Calculate net worth, portfolio performance, and financial analytics
  • Process uploaded documents using AI to extract financial data
  • Send authentication emails (magic links) for sign-in
  • Respond to your support requests
  • Detect and prevent fraud, abuse, or security incidents
  • Comply with legal obligations

3. AI and Document Processing

When you upload financial documents (bank statements, trade confirmations), we use the Anthropic Claude API to extract structured data. Documents are sent to Anthropic's API for processing and are subject to Anthropic's Privacy Policy. We do not use your documents to train AI models. Extracted data is stored in your account; original documents are retained only as long as necessary for processing.

4. How We Share Your Information

We do not sell your personal information. We share your data only in the following circumstances:

  • Service providers: We share data with third-party providers who help operate the Service, including Anthropic (document parsing), Alpaca Markets (market data), Plaid (account connectivity), and our hosting and email providers. These providers are contractually bound to use your data only to provide services to us.
  • Legal requirements: We may disclose information if required by law, regulation, legal process, or government request.
  • Safety: We may share information to protect the rights, safety, or property of Moneyline, our users, or the public.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We implement multiple layers of security to protect your data:

  • Row-Level Security (RLS): PostgreSQL database-level policies ensure that each user can only access their own data, even if application code has a bug
  • Application-level isolation: All queries are scoped to the authenticated user
  • Encryption in transit: All data is transmitted over HTTPS/TLS
  • Passwordless authentication: Magic links eliminate password-related vulnerabilities such as credential stuffing and phishing
  • Session management: Magic link tokens expire after 15 minutes and are single-use

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. For full details on our retention schedules and disposal practices, please see our Data Retention and Disposal Policy.

7. Your Rights and Choices

You have the following rights regarding your data:

  • Access and export: You can view all your data within the Service and export it at any time from Settings > Export
  • Correction: You can edit your account information, financial data, and trades directly in the Service
  • Deletion: You may request deletion of your account and all associated data by contacting us. We will process deletion requests within 30 days.
  • Plaid disconnection: You can disconnect linked accounts at any time from the Service

8. Cookies and Tracking

We use essential session cookies required for authentication and Service functionality. We do not use advertising cookies or third-party tracking pixels. We do not sell or share your data with advertisers.

9. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

10. International Data Transfers

Your data may be processed in the United States, where our servers and service providers are located. By using the Service, you consent to the transfer of your data to the United States.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected].