Privacy Policy

Last updated: July 5, 2026

Skycopia (“we”) is a personal finance product that helps you find and cancel unwanted subscriptions. This policy explains what data we collect, why, and the controls you have. The short version: we collect only what the product needs, we never see your bank credentials, and we never sell your data.

What we collect

Account information: your email address and name, provided when you sign up directly or via Google Sign-In.

Financial data you connect: when you link a bank or card through Plaid, we receive transaction history (date, merchant, amount, category), account names, and account mask (last 4 digits). When you upload a CSV, we store the transactions it contains.

We never see or store your bank username or password. Bank credentials are entered directly with Plaid or your bank — they never touch Skycopia's servers.

How we use it

To provide the product: detecting recurring charges and subscriptions, computing cash-flow analytics, flagging price increases and renewals, and tracking savings when you cancel.

We do not sell your data. We do not share your data with advertisers. We do not use your financial data to train shared machine-learning models.

Who we share it with

Service providers that make the product work, and nothing more:

  • Plaid Inc. — connects your financial institutions and retrieves transactions. Plaid's own privacy policy: plaid.com/legal/#end-user-privacy-policy
  • Supabase (hosted on AWS, US region) — our database and authentication provider. Data is encrypted at rest.
  • Vercel — application hosting.
  • Google — only if you choose Google Sign-In, for authentication.

We may disclose information if required by law.

How we protect it

All data is encrypted in transit (TLS) and at rest.

Your data is isolated per household with database-level row security — other users cannot query it.

Bank connections use Plaid's OAuth flows with your institution where available.

Your controls

You can disconnect a linked bank at any time, which stops all future data retrieval.

You can delete your account and all associated data by emailing hello@skycopia.com — deletion is completed within 30 days.

You may request an export of your data at the same address.

Data retention

We retain your data while your account is active. When you delete your account, your transactions, subscriptions, decisions, and bank connections are permanently deleted.

Changes & contact

If we make material changes to this policy, we'll notify you by email before they take effect.

Questions: hello@skycopia.com