Privacy Policy

1. About this policy

This Privacy Policy explains how Optimint (“Optimint,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit optimint.io, use the Optimint application at app.optimint.io, or contact us.

2. Information we collect

Depending on how you use Optimint, we may collect:

• Account information: your name, email address, password credentials, session information, and account preferences.
• Additional sign-in methods (optional): if you turn them on, an authenticator-app secret and backup codes for two-factor authentication, and passkey credentials (such as a public key and credential identifier) used to sign in.
• Financial information you enter: household details, household-member information, account names and types, balances, income sources, expenses, financial goals, tax-profile information, and contribution information.
• Connected financial accounts (optional): if you choose to connect an institution, we receive limited account data through a third-party financial-data provider (Stripe Financial Connections or Plaid): the institution name, account display name, account category and type, the last few digits of the account number, currency, current balance, and the time the balance was calculated, along with connection and refresh status.
• Shared household access: who belongs to each household, who created it, invitations you send (the invited email address, the person selected or created, expiry, status, and delivery status), access-change history (who joined, left, or was removed, and when), and a record of household access notifications we send so failed deliveries can be retried.
• Support and feedback: information you provide when you contact support or submit product feedback.
• Invite requests: if you request an invite to the pilot, the email address you provide, along with any optional name or note you include, and the status of that request.
• Device and usage information: browser and device information, approximate technical identifiers, pages or features viewed, and interactions with the site or application.
• Email information: delivery and engagement information related to account-verification, password-reset, and other service emails.

Optimint’s current product is designed around information you provide directly and, where you choose to connect an institution, balance information retrieved from that institution through Stripe Financial Connections. We will update this policy before using any additional data sources.

3. How we use information

We use information to:

• create and maintain your account and household;
• operate shared households, deliver household invitations, and email participants when someone joins, leaves, or is removed;
• review requests for an invitation to the pilot and contact you about access;
• calculate financial summaries, cash-flow views, and next-best-action recommendations;
• authenticate users and send verification, password-reset, and service communications;
• respond to support requests and improve the product;
• monitor security, prevent misuse, and troubleshoot failures;
• understand usage of the marketing site and application; and
• comply with legal obligations and enforce our agreements.

4. How we share information

We do not sell your personal information for money. We may share information with service providers that help us operate Optimint, including:

• Cloudflare: hosting, content delivery, application infrastructure, and database services.
• Stripe Financial Connections: a third-party financial-data provider used when you choose to connect an institution. Stripe handles the secure connection to your institution, and Optimint requests only the minimum needed to display accounts and balances, read-only access to account metadata and current balances. Optimint does not request transactions, ownership details, account or routing numbers, or the ability to move money.
• Plaid: a third-party financial-data provider used when you choose to connect an institution. Plaid handles the secure connection to your institution, and Optimint retrieves read-only account metadata and current balances. Because Plaid only makes balance data available alongside another data product, the Plaid linking flow may ask you to grant Plaid access to one additional product, such as transaction history; Optimint does not retrieve or store transaction history, ownership details, or account and routing numbers. To keep a connection working, Optimint stores an encrypted per-connection access token issued by Plaid, which cannot move money.
• PostHog: product and website analytics. We do not use analytics to display advertising based on your financial information.
• Resend: delivery of account-verification, password-reset, and other service emails.

People with access to a shared household. If you join a household (or accept an invitation to one), everyone with access to that household can see and change the same household information: accounts, balances, income, expenses, goals, tax profile, and recommendations. Access is equal and there are no roles. If you would rather keep information private, do not put it in a shared household. Removing your access or leaving does not delete the household’s records.

We may also disclose information when reasonably necessary to comply with law, respond to lawful requests, protect rights or safety, investigate abuse, or support a merger, acquisition, financing, or sale of assets.

5. Financial information

Optimint is designed to help you organize and understand household financial information. We use the information you provide to produce summaries and recommendations inside the service. You should not enter information you are not comfortable storing with Optimint, and you should review important results before acting on them.

Optimint does not ask for bank passwords through the current manual-entry experience. Never send passwords, authentication codes, or other account credentials to us by email or through support messages.

When you choose to connect an institution, Optimint uses a third-party financial-data provider (Stripe Financial Connections or Plaid) to obtain read-only account metadata and current balances. We use that information to display your accounts, record balance history, and calculate net worth and related summaries. We do not receive or store your bank credentials; the provider handles the authorization directly with your institution. For Plaid connections, Optimint stores an encrypted access token issued by Plaid so it can refresh balances; that token is not your bank password and can be revoked by disconnecting the institution. Connecting does not give Optimint the ability to move money, make payments, or change your accounts.

Shared household access and bank connections. Anyone with access to a household can see the accounts and balances in it, including accounts connected to a bank by another participant. When a participant leaves or is removed, household records are kept and bank connections continue syncing for the remaining participants, as the connection belongs to the household. A former participant keeps only a limited ability to see minimal connection labels for authorizations they personally created and to disconnect those authorizations; they cannot see balances, reconnect, refresh, or edit household data.

Balances are retrieved when you first link an account and when you choose to refresh them. For active Plaid connections, Optimint also attempts a balance refresh on weekday mornings, even when you do not open the app. We stop scheduled refreshes when the connection is disconnected or inactive. Refreshes are subject to provider and institution limits. Balances may be delayed and are not real-time: institutions report at different frequencies, some accounts or account types may be unsupported, and an institution may be temporarily unavailable. A refresh only retrieves new balance data and never changes your accounts or money.

6. Cookies and analytics

We and our service providers may use cookies, local storage, and similar technologies to keep the service working, remember preferences, protect accounts, understand usage, and measure product performance. You can control cookies through your browser settings. Some controls may affect site functionality.

Our analytics configuration may collect information about how you use the marketing site and application. Analytics settings and providers may change as the product evolves; we will update this policy when those changes materially affect the information we collect or how we use it.

7. Retention and deletion

We retain information for as long as reasonably necessary to provide the service, maintain security and business records, resolve disputes, and meet legal obligations. You may request access to, export of, or deletion of your Optimint information by contacting us. We may need to verify your identity before completing a request, and some information may be retained where required by law or reasonably necessary for security, fraud prevention, or dispute resolution.

If you request an invite but do not become a user, we keep your invite request for as long as we need it to consider and follow up on pilot access, and we delete it when it is no longer needed.

If you disconnect an institution, Optimint stops refreshing balances but keeps the accounts and the balance history already recorded until you ask us to delete your data. You can also exclude an account from Optimint; excluding an account stops it from counting toward your totals while keeping its history, and excluding every active account on a bank connection pauses balance refreshes for that connection. Re-enabling the account resumes refreshing. Requesting deletion of your Optimint information includes revoking connected-institution access where the provider supports it.

If you leave a shared household or are removed from it, your access ends immediately, but the household’s records and balance history are kept for the remaining participants. We retain household access history (who joined, left, or was removed) for the household, and we retain a record of access notifications so we can retry delivery. A household can be deleted only by its sole participant, which removes the household and its records; deleting your final household leaves you with a new private household.

8. Security

We use administrative, technical, and organizational measures designed to protect personal information, and you can add an extra layer of protection by turning on two-factor authentication or a passkey. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a security incident requiring notice, we will provide notice as required by applicable law.

9. Your choices and rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. You may also opt out of marketing emails; service and security messages may still be sent when necessary to operate your account. Contact us to exercise a right or ask a privacy question.

You can leave a shared household at any time, and any participant can remove another participant. A sole participant cannot leave an unattended household; they can invite someone else or delete the household.

10. Children

Optimint is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us.

11. Changes to this policy

We may update this policy as Optimint, our data practices, or applicable law changes. We will post the revised policy and update the “Last updated” date. If a change materially affects your rights or our use of information, we will provide any additional notice required by law.

12. Contact us

Privacy questions, access requests, export requests, and deletion requests can be sent to support@optimint.io.

General and business inquiries can be sent to hello@optimint.io. See our contact page for the full list of ways to reach us.

Operator: Optimint LLC
Mailing address: Add the applicable business mailing address before launch.