Privacy Policy

Last updated: June 30, 2026 · Governing law: State of Florida

Goldledger ("we," "us," or "our") is committed to protecting your personal and financial information. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights regarding that data.

1. Information We Collect

We collect only the information necessary to provide the Goldledger service:

• Email address — used to create and identify your account
• Bank transaction data — accessed via Plaid with read-only permission on your behalf
• Financial statement data — income statements, cash flow statements, and balance sheets generated from your transaction history
• Gold Score data — your calculated financial performance score and its components
• Account preferences and settings you configure within the platform

2. How We Use Your Information

Your data is used exclusively to provide and improve the Goldledger service:

• To generate your income statement, cash flow statement, and balance sheet
• To calculate and update your Gold Score
• To provide GoldExplain AI analysis of your financial statements
• To send you service-related notifications and account updates
• To improve the accuracy and features of our platform

3. How We Protect Your Data

We take security seriously. Your data is protected by multiple layers:

• AES-256 encryption for all data at rest and in transit
• Plaid read-only bank connections — we can view transactions but never move money
• JWT-based authentication for all API access
• Secure database infrastructure via Supabase with row-level security
• No plain-text storage of passwords or financial credentials

4. We Never Sell Your Data

We do not sell, rent, trade, or otherwise transfer your personal or financial data to third parties for any purpose. Your financial information is yours. We use it only to provide you the Goldledger service.

5. We Never Move Your Money

Goldledger connects to your bank accounts through Plaid with strictly read-only access. We can read your transaction history. We cannot initiate transfers, make payments, or move money in any way. We have no ability to access your credentials or log in to your bank directly.

6. Third-Party Services

We work with the following trusted third-party services to deliver Goldledger:

• Plaid — bank account connections and transaction data (read-only)
• OpenAI — AI-powered financial analysis and GoldExplain summaries
• Stripe — subscription payment processing
• Supabase — secure database and authentication infrastructure

Each of these providers maintains their own privacy and security standards. We share only the minimum data required for each service to function.

7. Data Retention

We retain your data for as long as your account remains active. If you close your account, we will delete your personal data within 30 days of your request, except where we are required to retain certain records for legal or regulatory compliance.

8. Your Rights

You have the right to:

• Request a copy of all data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Revoke Plaid bank access at any time from your account settings
• Opt out of non-essential communications at any time

To exercise any of these rights, contact us at hello@goldledger.co. We will respond within 30 days.

9. Cookies

Goldledger uses essential cookies only — necessary for authentication and to remember your session preferences. We do not use tracking or advertising cookies. You may disable cookies in your browser settings, though this may affect platform functionality.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our platform. Continued use of Goldledger after changes constitutes acceptance of the updated policy.