Pre-production privacy policy
Privacy Policy
This Privacy Policy explains how Unfurled collects, uses, stores, and protects information when you use the Unfurled web or mobile application, including features that connect financial accounts through Plaid Link.
Unfurled is not yet publicly launched. This policy will be published to a stable public URL before real-user launch.
Information We Collect
Account And Authentication Information
Unfurled uses Clerk for authentication. We may receive account information from your selected sign-in provider, such as your Clerk user identifier, email address, name, profile image, provider identifier, and session metadata.
Financial Account Information
When you connect an account through Plaid Link, Plaid may provide Unfurled with information needed to power budgeting and financial features, including Plaid item and account identifiers, linked account names, masks, types, subtypes, balances where enabled, transactions, merchants, dates, amounts, categories, and related metadata.
Unfurled does not collect or store your raw bank username or password. Plaid handles credential entry and financial institution authentication.
Analytics And Diagnostics
Unfurled may collect product analytics and diagnostic information, such as app events, device or browser metadata, error reports, performance data, and coarse usage information. Analytics and diagnostics are used to improve reliability, security, and product experience.
How We Use Information
- authenticate users and maintain sessions
- connect and manage Plaid-linked accounts
- show balances, transactions, categories, and budgeting information
- protect accounts and investigate security or reliability issues
- debug errors and improve application performance
- comply with legal, security, audit, and vendor requirements
How We Share Information
Unfurled does not sell personal information.
We share information with service providers that help operate the application, including Clerk, Plaid, Convex, hosting/deployment providers, Sentry/PostHog or similar diagnostics and analytics tools if enabled, Apple, and Expo EAS.
These providers may process information according to their own agreements, privacy notices, and security controls.
How We Protect Information
- authentication through Clerk and Google/Apple provider flows
- server-side authorization for protected backend access
- separation of public client configuration from server-side secrets
- least-privilege access to internal systems
- MFA requirements for internal systems where supported
- dependency monitoring and vulnerability remediation processes
- data minimization for logs, analytics, and diagnostics
Retention
Unfurled retains information for as long as needed to provide the product, comply with legal or security obligations, resolve disputes, enforce agreements, and maintain audit records. Plaid-linked data and account data should be deleted or de-identified when no longer needed, subject to legal, security, backup, and fraud-prevention requirements.
Your Choices And Rights
Depending on your location, you may have rights to access, correct, delete, export, or restrict use of your personal information. You may also disconnect financial accounts through the app or by contacting Unfurled.
Account deletion does not automatically restore data if you later create a new account. Some records may be retained when required for security, compliance, fraud prevention, dispute resolution, or legal obligations.
Children's Privacy
Unfurled is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
Changes
Unfurled may update this Privacy Policy as the product, vendors, or legal requirements change. Material updates should be reflected in the public policy before production use.
Contact
For privacy requests or questions, contact the Unfurled owner through the support or contact channel published with the application.