How Plenee collects, uses, and protects your information — written plainly.
When you create a Plenee account, we collect:
Plenee uses Plaid Technologies, Inc. ("Plaid") to connect to your financial institution accounts. When you link a bank account, Plaid provides us with:
Plaid's own collection and use of your information is governed by Plaid's Privacy Policy and Plaid's End User Privacy Policy. We encourage you to review those policies.
We automatically collect technical information when you use the Service — including when you interact with our AI chat assistant on our marketing website before creating an account — in order to personalize your experience — for example, to tailor the layout, defaults, and financial insights we show you based on your device, location, and how you interact with the app. This includes:
Log & Network
Device & Browser
Connection & Session
We may derive inferences from the information described above to personalize your experience. For example, we may estimate a general income range based on your ZIP code using publicly available Census data, or infer device quality from hardware signals, in order to tailor the presentation of the Service — including the examples our AI chat assistant uses, both before and after you create an account. These inferences are used solely to improve your experience and are not used for credit scoring, advertising targeting, or any purpose unrelated to the Service.
We do not use third-party advertising trackers or sell usage data to analytics providers.
Plenee Copilot, our in-app AI assistant, is powered by Anthropic's Claude API. When you chat with Copilot, we send Anthropic your message, the conversation history, and a summary of your accounts (balances, debts, upcoming bills, account names and your stated goals), so it can answer with your own numbers, and the specific transactions or details it looks up to answer your question.
Copilot also lets you optionally upload a file — a bank statement, receipt, or screenshot — so it can help identify a transaction that didn't sync automatically. If you choose to upload a file, it is read by Google's Gemini service, as described below. Anthropic receives only the details read from it, such as dates, amounts, line items and company names, never the picture, the PDF or its text. Copilot holds a copy of an uploaded file while you decide what to do with it. If you don't confirm it, the copy is deleted automatically within two days. Receipts and statements you confirm are kept with your account. When you save a document, we keep the file and what Plenee read from it (its type, title, issuer, dates, identifying numbers, and the amounts, dates and other details on it) in your Documents list until you delete it. Deleting a document removes the file and everything read from it. If a document you save is a bill with an amount due and a due date, Copilot can add it to your planned bills and remind you before it's due. Please don't save a government ID, such as a driver's license or passport, unless you want to keep it in Plenee. Your conversation with Copilot (including any transaction Copilot adds to your account with your explicit confirmation) is retained as part of your normal account data, and we also keep the chat-derived information described in Section 1.6.
Anthropic processes this information under its own commercial API terms: it does not use your data to train its models without our express permission, and it automatically deletes data from its systems within 30 days of receipt, except where retention is required by law or to enforce its usage policies. See Anthropic's Privacy Policy for current details.
Receipts and documents you add are read by Google's Gemini service to find the details in them, such as the store, date, items and amounts, or the key facts of a document. Google doesn't use them to train its models and keeps them only briefly to prevent misuse.
Credit reports, Social Security statements, tax returns and pay stubs you add are read the same way, by Google's Gemini service. Social Security numbers are removed before their text is sent. Google doesn't use them to train its models and keeps them only briefly to prevent misuse.
Questions you type to Copilot, and the account figures needed to answer a simple one (such as a balance, a spending total or a due date), are sent to Google when Plenee uses Google's Gemini to answer them. Gemini never sees your documents, identifier numbers, goals or saved memory. Google doesn't use them to train its models and keeps them only briefly to prevent misuse.
When you tap Look up value on a vehicle, or choose monthly or annual value updates for it, its VIN, year, make, model, trim and mileage are sent to Google's Gemini service, which runs a Google search with them to find the vehicle's value. Nothing else about you or the vehicle is sent. Google keeps them for up to 30 days and doesn't use them to improve its products.
Uploading a document or screenshot to Copilot is entirely optional. If you would rather not have Copilot analyze an uploaded file for privacy reasons, you are not obligated to use that feature — every other part of the Service, including Copilot's regular chat features and all core account, budgeting, and transaction functionality, works fully without it. Whatever is in a file you upload is sent to Google's Gemini service so it can be read. Plenee removes Social Security numbers from a credit report, a Social Security statement, a tax return or a pay stub before its text is sent (see Section 1.11), and doesn't change any other file you upload. Plenee does not remove sensitive details from chat messages or replies. Please don't upload a government ID unless you want it saved in your Documents list, and don't upload a full card number.
When you snap a receipt or invoice, Plenee reads it, saves its details as an itemized receipt, and asks whether to keep the photo with that purchase. When you upload one from a file, from your downloaded folder or by email, Plenee keeps a copy only if you turn on Keep copies of uploaded, downloaded and emailed receipts and invoices in your settings; otherwise its copy is deleted once it's read, and your own file stays where it was. You can delete a kept copy at any time, and the itemized receipt stays.
If you forward receipts or invoices to your Plenee address, they're received by our email provider, Postmark, and passed to Plenee to read. Postmark keeps a copy of each email for 45 days for spam and abuse checks, then deletes it. Plenee doesn't keep the email itself. When you save a receipt or invoice from it, Plenee saves its details as an itemized receipt with that purchase, and keeps the file only if you turn on Keep copies of uploaded, downloaded and emailed receipts and invoices. Anything you don't save is deleted within 2 days. We keep a 30-day record of which address sent each email and how many files it had.
When you chat with Copilot, we keep a short summary of what you told it — for example a goal you mentioned or a question you left unresolved — so it can pick up where you left off in a later conversation and in your daily brief. This summary is stored with your account, is visible only through your account, and is deleted when you delete your account. It is not shared with anyone outside Plenee and is not used to train AI models.
Once a day we review new Copilot conversations to learn how to improve the product. From that review we keep:
Your original chat messages are kept only as long as your conversation exists in the app; conversations are limited to ten per account, and older ones are removed automatically. Deleting a conversation or your account removes the messages.
If you turn on notifications, your browser gives us a push address and security keys for that device. We store them with a short description of the browser and device (its "user agent") and your notification settings. We use them only to send the notifications you chose, such as a reminder that a bill is due soon. Notifications are delivered through your browser maker's push service (for example Apple, Google, Microsoft or Mozilla). The message is encrypted so that service can't read it, and we keep amounts, account names and account numbers out of notification text. You can turn notifications off in Plenee or in your device settings at any time. We delete a device's push address when you turn notifications off for it, when the device stops accepting them, or when you delete your account.
You can invite someone to view your Plenee account. A viewer can see your accounts, transactions and budgets. They can also add receipts, which update your records and show who added them, and save documents, which you can see. They can't make other changes. They can't see your credit report and Plenee Score.
Viewers can see all your saved documents, receipts, bills and statements. They can open the files themselves, so any numbers printed on them, such as a Social Security number on a tax form, are visible to them. A viewer's Copilot use counts toward your account's usage, and you can set a dollar limit for each viewer.
When you invite a viewer, we record their full name, their email address and their relationship to you, which only you can see. The invite link works once and expires in 72 hours. The email address you invited is removed 30 days after the invite ends. Viewers can send invitations to try Plenee with their own link, and only the viewer who sends an invitation can see it: not you, and not other viewers. Everything a viewer adds becomes part of your account and stays there, even if you remove them, except ID numbers read from their documents. You can remove a viewer at any time.
If you are a viewer on someone else's account, what you add becomes part of the owner's account and stays there: you can't remove it in the app, even after your access ends, but the owner can. The owner can read what you ask Copilot there, and it isn't added to anyone's Copilot memory. Your Copilot use is charged to the owner.
If you share a link to Plenee and ask about it, Plenee opens that page once to read its text for your question. We don't keep the page.
If you invite someone to try Plenee, Plenee opens your own email app with a suggested message and your personal invite link, and you decide whether to send it. The addresses you choose stay on your device: Plenee doesn't receive or keep them. If someone signs up with your link, we record that they joined through your invitation.
If you upload your credit report, we read it to calculate your Plenee Score. We keep the information in it, such as your name, birth date, addresses and employers, each account's type, limit, balance, payment history and age, and any collections, public records and inquiries, and we delete the uploaded file once it has been read. We remove your Social Security number before the report is sent to our AI provider for reading, and we don't keep it.
We keep what Plenee read from each receipt or document you add, and what you saved or corrected, to measure and improve how accurately Plenee reads. To test a change to how Plenee reads, a receipt or document you have kept in Plenee may be sent again to Google's Gemini service and read the same way it was when you added it. The record is deleted with the receipt or document, or when your account's data is deleted. If you don't save what Plenee read, the record is deleted after 30 days, and if you cancel it, what it holds is deleted at once.
We use the information we collect solely to provide, maintain, and improve the Plenee Service. Specifically:
| Purpose | Information Used |
|---|---|
| Create and manage your account | Account information |
| Display your financial accounts, balances, and transactions | Financial data via Plaid |
| Provide AI-powered budgeting insights and recommendations | Financial data via Plaid, usage data |
| Power Plenee Copilot, including optional document/screenshot analysis you choose to use | Conversation content, financial data summaries, and any file you choose to upload |
| Test and improve how Plenee reads receipts and documents | Receipts and documents you add, what Plenee read from them, and what you saved or corrected (see Section 1.12) |
| Send account-related notifications (e.g., low balance alerts) | Account information, financial data |
| Diagnose and fix technical problems | Log data, usage data |
| Personalize the presentation of the Service (e.g., layout, defaults) | Device signals, geolocation, inferences |
| Comply with legal and regulatory obligations | Account and financial data as required |
We do not use your financial data for advertising, credit scoring, or to make decisions that affect your eligibility for financial products or services.
We do not sell your personal information or your financial data to any third party. We do not use your information for cross-context behavioral advertising.
To operate the Service, we use trusted infrastructure providers who process data strictly on our behalf. These providers are contractually prohibited from using your data for any purpose beyond providing services to Plenee. We provide information to legal or regulatory authorities only when compelled by a valid court order or subpoena.
| Service Provider | What is Used | Purpose |
|---|---|---|
| Plaid Technologies, Inc. | Authentication credentials for your financial institution (processed by Plaid on your behalf) | Retrieve your financial data via the Plaid API |
| Anthropic, PBC | Conversation content, financial data summaries, and the details read from a file you attach to Copilot, never the file itself | Power the Plenee Copilot AI assistant (see §1.5) |
| Google LLC (Gemini API) | Receipts, documents, credit reports, Social Security statements, tax returns and pay stubs you add, with Social Security numbers removed before their text is sent; questions you type to Copilot and the account figures needed to answer a simple one; a vehicle's VIN, year, make, model, trim and mileage when you look up its value | Read the files you add so Plenee can save their details, and read them again in tests of how accurately Plenee reads (see §1.12); answer some simple Copilot questions; and look up a vehicle's value with a Google search (see §1.5) |
| Supabase, Inc. (AWS sub-processor) | Account and financial data stored in our database | Cloud database and authentication infrastructure |
| Render Services, Inc. | API request logs, encrypted financial data in transit | Application server hosting |
| Vercel, Inc. | Web application files | Frontend hosting |
| Postmark (AC PM, LLC) | Your name, email address and the content of account emails, and the emails you forward to your Plenee address | Send account emails, such as sign-up confirmation, password reset and account closing, and receive the emails you forward to Plenee |
| Legal or regulatory authorities | Information specified in the court order or subpoena | Compliance with a valid court order or subpoena only |
All infrastructure providers are bound by data processing agreements and are prohibited from using your data for their own purposes.
Federal law (15 U.S.C. § 6801 et seq., the Gramm-Leach-Bliley Act) requires us to explain how we collect, use, and protect your personal financial information. This notice applies to current and former Plenee customers.
We collect the following types of personal financial information to provide the Service: bank account and routing numbers, account balances, transaction history, and account holder name as reported by your financial institution.
We use your personal financial information solely to operate and improve the Plenee Service — to display your accounts, generate budgeting insights, and send you account-related notifications. We do not use your financial information for marketing to you on behalf of third parties, and we do not provide it to data brokers, marketing companies, or nonaffiliated businesses for their own purposes.
To deliver the Service, we use infrastructure providers (Plaid, Anthropic, Google, Supabase, Render, Vercel, Postmark) who process your data on our behalf under contract. These providers are not permitted to use your data for any purpose other than providing services to Plenee.
We will provide your information to government or regulatory authorities only when required to do so by a valid court order or subpoena. We will not voluntarily provide your financial information to law enforcement absent such compulsion.
| Category | Does Plenee do this? | Your option |
|---|---|---|
| Use for everyday service operations | Yes — required to provide the Service | No opt-out (necessary to operate) |
| Provide to marketing companies or data brokers | No | Not applicable — we do not do this |
| Joint marketing with other financial companies | No | Not applicable — we do not do this |
| Provide to affiliates for their own marketing | No | Not applicable — we have no affiliates |
| Provide to nonaffiliates for their marketing | No | Not applicable — we do not do this |
We retain your account and financial data for as long as your Plenee account is active. If you start to sign up but don't confirm your email within 7 days, we delete the name and email you entered.
To close your account, choose "Close account" in the app and choose what happens to your data (below). If you're on a paid plan, your account stays active until the end of your current billing period and you won't be charged again; otherwise it closes right away. When it closes, we disconnect your banks from Plaid and sign you out. Until your account closes, or until your data is deleted if you chose that, you can change your mind by signing in and choosing "Reopen my account".
You can ask us to delete your data sooner at any time by writing to privacy@plenee.com.
If you don't use your account for 24 months, we'll email you reminders. If you still don't use it within 30 days of the final one, we close your account and delete your data as described below.
When your data is deleted:
Unless you chose to stop them when closing your account, your email address stays on our list for Plenee news and product updates. Every one of those emails has an unsubscribe link, and unsubscribing removes your address from the list.
You can sign up again with the same email at any time. A new account starts empty.
We may retain limited records longer where required by law (e.g., records of transactions for tax or regulatory compliance purposes).
We protect your information using industry-standard security controls:
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at security@plenee.com.
How you can protect yourself. Keeping your information safe is a shared job. Plenee will never ask for your bank, card or crypto wallet passwords, one-time codes, PINs or recovery phrases, so don't share them with anyone or store them in Plenee. Keep your Plenee login private, turn on two-factor authentication at your banks and wallets, and treat unexpected messages asking you to sign in or confirm your details as possible phishing. If we learn of a breach of our systems that affects your information, we will notify you as the law requires.
You can close your account at any time in the app and choose whether we keep your data for 24 months, so you can come back, or delete it. Section 5 explains what happens and when. You can also ask us to delete your data at any time by writing to privacy@plenee.com.
You may request a copy of the personal information we hold about you by contacting us at privacy@plenee.com. We will respond within 30 days.
You may disconnect any linked bank account at any time from within the app. Disconnecting ends Plenee's access to your bank: we revoke the connection with Plaid and no new transactions are retrieved. The transactions and balances already retrieved stay in your Plenee account as an offline account, along with any changes you made, so your history is kept. To remove that data, delete the offline account in the app or contact privacy@plenee.com.
If you are a California resident, you have the right to:
Categories of personal information we collect (California disclosure):
To exercise your California rights, contact us at privacy@plenee.com.
The Service is intended for adults aged 18 and older. You must be at least 18 years of age to create an account or use the Service. This requirement exists because using the Service requires entering into a binding legal agreement and connecting financial accounts that require adult ownership under applicable banking and contract law.
We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a person under 18, please contact us at privacy@plenee.com and we will delete it promptly.
The core Plenee Service operates without requiring cookies. Technical signals described in Section 1.3 are collected passively as part of serving the application and do not require a cookie consent mechanism.
The following features, if and when implemented, will require your consent via a cookie notice before activation:
You will be notified and given the opportunity to consent before any of these are enabled. You may withdraw consent at any time by contacting privacy@plenee.com.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice within the app at least 30 days before the change takes effect. The "Last Updated" date at the bottom of this policy reflects the most recent revision.
Continued use of the Service after the effective date of a revised policy constitutes your acceptance of the updated terms.
If you have questions about this Privacy Policy or how we handle your information:
Plenee LLC
A Florida limited liability company
Email: privacy@plenee.com
Security issues: security@plenee.com