FolioTalk Privacy Policy

Effective Date: February 21, 2026 Last Updated: February 21, 2026

1. Introduction

FolioTalk ("we," "our," or "us") is a personal finance application that helps users consolidate and view their investment holdings across multiple financial institutions. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

2. Information We Collect

2.1 Account Information

• Google Account Data: When you sign in with Google, we receive your name, email address, and a unique Google user identifier. We do not receive or store your Google password.

2.2 Financial Data

• Plaid Integration: We use Plaid Inc. to connect to your financial institutions. When you link an account through Plaid, we receive:
• Account names and types (e.g., brokerage, 401k, IRA)
• Investment holdings (ticker symbols, quantities, market values)
• Account balances
• What we do NOT receive: We do not receive your bank login credentials. Plaid handles authentication directly with your financial institution.

2.3 Technical Data

• Basic server logs (IP addresses, request timestamps) for security and debugging purposes.

3. How We Use Your Information

We use the information we collect solely to: - Authenticate your identity and maintain your session - Retrieve and display your investment holdings across linked institutions - Compute portfolio metrics (asset allocation, top holdings, concentration) - Improve and maintain the service

We do not: - Sell your personal or financial data to third parties - Use your data for advertising or marketing purposes - Share your data with third parties except as described in this policy

4. Third-Party Services

4.1 Plaid

We use Plaid to connect to your financial accounts. Plaid's use of your data is governed by the Plaid End User Privacy Policy. When you connect an account through Plaid, you authorize Plaid to access your financial data on your behalf.

4.2 Google Sign-In

We use Google OAuth for authentication. Google's use of your data is governed by Google's Privacy Policy.

5. Data Storage and Security

• All data is transmitted over TLS 1.2+ encrypted connections.
• Plaid access tokens are encrypted at rest in our database.
• We use industry-standard security practices to protect your data. See our Information Security Policy for details.
• We limit access to your data to authorized personnel only.

6. Data Retention

• We retain your data for as long as your account is active.
• When you delete your account, we delete your personal and financial data within 30 days.
• See our Data Deletion and Retention Policy for details.

7. Your Rights

You have the right to: - Access: Request a copy of the data we hold about you. - Deletion: Request deletion of your account and all associated data. - Disconnect: Unlink any financial institution at any time, which revokes Plaid's access to that institution. - Portability: Request an export of your data in a machine-readable format.

To exercise any of these rights, contact us at hello@folio.talk.

8. Children's Privacy

FolioTalk is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date.

10. Contact Us

If you have questions about this Privacy Policy, contact us at: - Email: hello@folio.talk