Privacy Policy

Effective October 31, 2026 · Last reviewed October 31, 2026

Aggregate Finance (“the app,” “we,” “us”) is operated by Baker Stack. It connects to your bank accounts through Plaid and brings together your credit card statements, transactions, recurring payments, and, if you connect a brokerage, your investments, in a Google spreadsheet you own, an Excel workbook in your OneDrive, or in files you download for Excel, LibreOffice, or as CSV. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

When you sign in

• With Google: your name, email address, profile photo, and Google account identifier.
• With a passkey: nothing new. Your device proves it holds a passkey you added to your account; the passkey itself never leaves it.
• Your time zone: read from your browser, or as you set it on the Account page, so your Overview and budgets start each day and month at your midnight.
• With your email: your email address. To sign you in we email a 6-digit code and a link, and keep scrambled (hashed) copies of them, with the time and IP address of the request, for 15 minutes.
• Sign-in activity: for each sign-in, failed sign-in, change to how you sign in or to two-step verification, and session you sign out, the time, IP address, and browser type, so you can see recent activity on your account and we can look into a report of someone else getting in. Kept for one year, and deleted with your account.
• Two-step verification: if you set it up, the public key and a name for each passkey you add (the private key stays on your device or in your password manager), an encrypted key for your authenticator app, and scrambled (hashed) copies of your recovery codes. We also keep a scrambled identifier for each browser you’ve verified from, and when it was last used, so we can email you when someone signs in from one we haven’t seen; that email names the browser, such as “Chrome on macOS”, and includes the IP address of the sign-in. A browser unused for 400 days is forgotten.
• Google Sheets access (optional): if you connect Google Sheets, we request the drive.file permission. It lets us create a spreadsheet for you, or open one you explicitly choose, and write to it. It does not give us access to any other files in your Google Drive. We store an encrypted token so the app can keep that spreadsheet updated.
• OneDrive access (optional): if you connect OneDrive, we request access to the app’s own folder in your OneDrive (Files.ReadWrite.AppFolder). It lets us create a workbook there and keep it updated. It does not give us access to any other files in your OneDrive, or to your name or email address. We store an encrypted token so the app can keep that workbook updated, and we read the workbook before each update so your notes and your own tabs are kept.
• How you set up your data: the Overview layout, category groups, categories you follow, budgets, and merchant rules you choose on your dashboard, so the app can build your spreadsheet and downloads the way you set them up. They’re deleted with your account.
• Names and types you give recurring payments on your dashboard, so they label your spreadsheet and downloads. When your bank changes how it reports a payment, or you reconnect a bank, we keep the name and type with the payment’s merchant and frequency so we can put them back; they’re deleted once they’re put back, when you dismiss the notice about them, or when you delete your account. Notes columns stay in your spreadsheet and are not read.

From your financial institutions, through Plaid

When you connect a bank, you sign in to it through Plaid. We never receive or store your bank username or password. With your permission, Plaid provides us with:

• Accounts: account names, the last four digits of account numbers, current balances, and credit limits for credit cards.
• Transactions: date, amount, merchant name, spending category and subcategory, and which account they belong to.
• Credit card statements: statement balance, minimum payment, statement and due dates, and your most recent payment.
• Investments (only if you connect a brokerage): each holding’s security name, ticker, type, quantity, price, value, and cost basis, and, if you add Investment Transactions, your buys, sells, dividends, and fees. We also keep each day’s holdings, without cost basis, for 400 days, so we can show how your investments have changed; older days are deleted automatically.
• Recurring payments: recurring charges Plaid detects, such as subscriptions and bills, with their frequency and amounts.

From files you import

You can import transactions from a file you download from your bank, Apple Card or another app, and type transactions in. We read the file to take out its transactions (dates, amounts, descriptions, categories, notes, and the last digits of an account number) and the columns they came from, so you can review them. We don’t keep the file itself. Imported transactions are encrypted like the rest of your financial data, and you can remove an import, and everything it added, at any time.

We don’t connect to the app a file comes from, such as Tiller, Monarch, Copilot Money, YNAB, Mint, Muse or Apple Card, and receive nothing from it. You export the file and choose to upload it. We aren’t affiliated with any of these companies; we only provide steps for exporting your data from them and the means to import it.

We store only the fields the app uses to build your dashboard, spreadsheet, and downloads, and we encrypt them before storing them (see Security). The access tokens Plaid issues are encrypted too, with separate keys. Plaid’s handling of your data is described in the Plaid End User Privacy Policy.

Billing

If you subscribe, payments are handled by Stripe. You enter your payment details directly with Stripe, and we never receive or store your full card number. We store your Stripe customer and subscription identifiers, your subscription status, and your billing period, so we know which features you can use. Stripe’s handling of your information is described in the Stripe Privacy Policy.

When you contact us

If you send a message through the contact form, we store your email address, name (if you give one), topic, and message so we can reply. Your name and message are encrypted the same way as your financial data (see Security). To limit abuse, we also store a one-way hash of your IP address, not the address itself. When you delete your account, messages we’ve answered are deleted with it, and any we haven’t answered yet are kept until we have, then deleted. You can also ask us to delete them sooner.

Technical information

We use a single essential cookie to keep you signed in and protect against forged requests. We don’t use advertising or analytics cookies. Our hosting provider records standard server logs (such as IP address, time, and requested page) for security and troubleshooting.

For each browser you’re signed in on, we keep its IP address, the browser and device type it reports, and when it was last active, so your Account page can show where you’re signed in and let you sign out of any of them. We delete that record when the session ends: when you sign out, when you sign it out from another browser, after 30 days without use, or when you delete your account.

We count arrivals on our public pages as daily totals by referring website, and visits to our sign-in page as an overall daily total. These counts are not linked to individual accounts. For accounts created after measurement begins, we record when you first connect a bank, successfully sync a spreadsheet, and pay.

How we use your information

• To sign you in and provide the app: syncing your connected accounts, writing your data to your Google spreadsheet or OneDrive workbook if you connected one, and building the files you download.
• To manage your subscription, including billing for the number of connected banks.
• To keep the service secure, diagnose problems, and prevent abuse.
• To email you when something needs your attention, such as a bank asking you to sign in again, Google Sheets or OneDrive access ending, or a failed payment, and about important changes to the app.
• If you turn it on, to email you a weekly summary of your accounts: your spending for the week, your largest transactions and the merchants they were with, anything unusual, payments coming up, and how your investments moved. Account balances are included only if you choose to include them. An email is kept by your email provider and isn’t encrypted the way your data is in the app, so you choose what goes in it, and you can turn it off at any time under Customize.

We do not sell your information, use it for advertising, or share it with data brokers.

Google user data

Aggregate Finance’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide and improve the user-facing features described above. We don’t transfer it except as needed to provide those features, to comply with law, or as part of a merger or acquisition with your notice. We don’t use it for advertising. We don’t allow humans to read it unless you give permission, it’s necessary for security or to comply with law, or it’s aggregated and anonymized. We don’t use it to develop, improve, or train generalized artificial intelligence or machine learning models.

Who we share information with

We share information only with service providers that help us run the app, and only as needed for that purpose:

• Plaid connects to your financial institutions.
• Google provides Google sign-in and hosts your spreadsheet in your own Google Drive, if you use them.
• Microsoft hosts your workbook in your own OneDrive, if you connect it.
• Stripe processes subscription payments.
• DigitalOcean hosts the application and our database, and keeps daily backups of the database for seven days.
• Resend delivers our emails to you.
• MongoDB Atlas hosted our database until October 31, 2026. We keep that copy in case we need to move back, and delete it by November 14, 2026.
• Sentry receives a report when something in the app fails: what went wrong and where in our code. Reports don’t include your financial data, your email address, or what you entered.
• GitHub stores the encrypted weekly database backups we took up to October 31, 2026. Each backup is deleted 90 days after it was taken, and the encryption keys for the financial data in it after 14 days.

We may also disclose information if required by law, or to protect the rights, safety, or security of our users or others.

Security

Data is encrypted in transit using HTTPS/TLS, including between our servers and our database, Plaid, Google, Microsoft, and the other providers above.

Your financial data is encrypted at rest by the app itself before it’s stored: balances, transactions and merchants, credit card statements, investments, recurring payments, and the names, notes, rules, and budgets you add. It’s encrypted with AES-256 using a key unique to your account, and our database provider also encrypts its storage. The key that unlocks your account’s key is kept with our hosting provider, separately from the database, so access to the database alone doesn’t reveal your financial data. Bank, Google and Microsoft access tokens are encrypted with their own, separate keys. What stays readable in the database is what we need to find your records: your email address and name, your subscription status, which banks you’ve connected, dates, and record identifiers.

Your data is decrypted only in our server’s memory, while it’s being used to sync your accounts and build your dashboard, spreadsheet, and downloads. Access to our systems is restricted. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

Retention and your choices

• Remove a bank: removing a bank in the app revokes our access through Plaid and deletes its stored access token. Data already synced remains until you delete your account. You can also manage connections Plaid knows about at my.plaid.com.
• Disconnect Google Sheets: disconnecting in the app revokes our Google access and deletes the stored token. You can also remove access in your Google Account permissions.
• Disconnect OneDrive: disconnecting in the app deletes the stored token. Microsoft doesn’t let an app remove itself from the apps you’ve approved, so the app then takes you to Microsoft’s app permissions page, where you remove Aggregate Finance.
• Your spreadsheet, workbook and downloads: a Google spreadsheet lives in your Google Drive, an Excel workbook in your OneDrive, and downloaded files on your device. You can edit or delete them at any time; we don’t delete them for you. Files are built when you download them and sent straight to your browser; we don’t keep a copy.
• Delete your account: choose Account in the account menu, then Delete account. We immediately disconnect your banks from Plaid, cancel any subscription, revoke our Google access, delete our Microsoft token, and delete your account and the financial data we store, including contact messages we’ve answered, along with the key that encrypts your financial data. Encrypted copies in our backups can no longer be read once the last backup of that key expires, within 14 days. Stripe keeps its own records of past payments as required by law. You can also email contact@aggregatefi.com from the email address you sign in with. We keep your information only as long as your account is active, or as needed to meet legal obligations.
• Access or correct your data: contact us at the same address.

Children

The app is intended for adults (18 or older) in the United States and is not directed to children. We don’t knowingly collect information from children under 13.

Changes to this policy

If we make material changes, we’ll update the effective date above and let signed-in users know in the app or by email.

Contact

Questions or requests: contact@aggregatefi.com.