Privacy Policy

What we collect

Account information: your email address and name, provided when you sign up directly or via Google Sign-In.

Financial data you connect: when you link a bank or card through Plaid, we receive transaction history (date, merchant, amount, category), account names, account type, and account mask (last 4 digits). When you upload a CSV, we store the transactions it contains.

We never see or store your bank username or password. Bank credentials are entered directly with Plaid or your bank — they never touch Skycopia's servers.

We practice data minimization: we request only the data the product needs to work, and nothing more.

Financial data and Plaid

We use Plaid Inc. ("Plaid") to connect your bank and card accounts and to retrieve your transactions. By linking an account, you authorize Plaid to access information from your financial institution on your behalf, and you agree to Plaid's End User Privacy Policy.

Plaid handles your bank login directly and shares the resulting account and transaction data with Skycopia so we can provide the product. Plaid's processing of your data is governed by Plaid's own privacy policy.

• Plaid's End User Privacy Policy: plaid.com/legal/#end-user-privacy-policy

You can revoke Plaid's access to any linked institution at any time by disconnecting it in Skycopia (Settings) — this severs the connection at Plaid and stops all future data retrieval.

How we use it

To provide the product: detecting recurring charges and subscriptions, computing cash-flow analytics, flagging price increases and renewals, and tracking savings when you cancel.

Your financial data is not sent to any third-party AI or machine-learning service.

We do not sell your data. We do not share your data with advertisers. We do not use your financial data to train shared or third-party machine-learning models.

Who we share it with

Service providers that make the product work, and nothing more:

• Plaid Inc. — connects your financial institutions and retrieves transactions. See "Financial data and Plaid" above.
• Supabase (hosted on AWS, US region) — our database and authentication provider. Data is encrypted at rest.
• Vercel — application hosting.
• Google — only if you choose Google Sign-In, for authentication.

We do not sell or rent your personal information to anyone. We may disclose information if required by law or to protect our rights.

How we protect it

We maintain administrative, technical, and physical safeguards designed to protect the security, privacy, and confidentiality of your data.

All data is encrypted in transit (TLS) and at rest.

Your data is isolated per household with database-level row security — other users cannot query it.

Access to production data is restricted to personnel who need it to operate the service.

Bank connections use Plaid's OAuth flows with your institution where available.

Your controls & privacy rights

Disconnect a bank: you can unlink any connected institution at any time, which revokes access at Plaid and stops all future data retrieval.

Delete everything: you can permanently delete your account and all associated data yourself, instantly, from Settings → Delete account. This disconnects every linked bank at Plaid and erases your transactions, subscriptions, decisions, and settings. You can also request deletion by emailing hello@skycopia.com.

Access, correct, or export: you may request a copy of your data, ask us to correct it, or export it by emailing hello@skycopia.com. Depending on where you live, you may have additional rights under laws such as the CCPA or GDPR; we honor these requests regardless of location.

Looking to cancel a specific subscription instead of your Skycopia account? Check our cancellation guides for merchant-specific steps.

Data retention

We retain your data while your account is active. When you delete your account, your transactions, subscriptions, decisions, and bank connections are removed immediately, and residual copies in encrypted backups are purged within 30 days.

Eligibility

Skycopia is intended for users 18 and older. We do not knowingly collect data from anyone under 18.

Changes & contact

If we make material changes to this policy, we'll notify you by email before they take effect.

Questions or requests: hello@skycopia.com