Privacy Policy for your financial data

Marigold is a personal finance dashboard used to organize accounts, transactions, budgets, monthly checklist items, paycheck import data, HSA statement data, and related financial insights. In this policy, "Marigold," "we," "us," and "our" refer to the person, business, or organization that provides the Marigold deployment you access.

If your account is provided by an organization, that organization may be the controller or administrator of your information. This policy is intended to describe the baseline privacy practices for the Marigold application.

• Account information, such as your email address, password-related authentication records, session data, and account identifiers.
• Financial account information you connect through Plaid, such as institution names, account names, account type, account mask, account balances, transaction history, merchant names, dates, categories, and, if enabled, investment account or investment transaction data.
• Information you import or enter, such as CSV transaction files, paycheck details, HSA statement details, account names, categories, budgets, fixed expenses, monthly checklist values, notes, and review decisions.
• Technical information, such as device and browser details, IP address, cookies or similar session technologies, log data, error reports, security events, and usage activity needed to operate, secure, and improve the Service.
• Communications you send to the Marigold provider, including support requests, feedback, and administrative correspondence.

• Provide, maintain, secure, and troubleshoot Marigold.
• Authenticate users, protect accounts, prevent abuse, and enforce access controls.
• Connect financial accounts, sync balances and transactions, import files, deduplicate transactions, and show budgeting or spending views.
• Personalize the dashboard using categories, fixed expenses, monthly checklist entries, account ordering, and other settings you choose.
• Respond to support requests, comply with legal obligations, and protect the rights, safety, and security of users, Marigold, and service providers.

Marigold uses Plaid to let you connect financial accounts. When you use Plaid Link, Plaid may collect and process information from your financial institution under Plaid's own terms and privacy notices. Marigold receives access tokens and account data needed to power the dashboard, but Marigold is not intended to receive your bank login credentials.

You should review Plaid's privacy materials at plaid.com/legal. You can disconnect linked accounts through Marigold where available or by contacting the provider of your Marigold account.

We do not sell your personal financial information or use it for third-party advertising. We may share information in these limited circumstances:

• With service providers that host, secure, authenticate, analyze, or operate Marigold, such as database, infrastructure, authentication, financial data connectivity, and monitoring providers.
• With Plaid and your financial institutions as needed to connect, verify, maintain, or disconnect linked accounts.
• With the organization or administrator that provides your Marigold account, if your access is part of an organization-managed deployment.
• When required by law, legal process, or a good-faith belief that disclosure is needed to protect rights, safety, security, or property.
• In connection with a merger, financing, acquisition, reorganization, or similar business transaction, subject to appropriate protections.
• With your consent or at your direction.

Marigold is designed to use reasonable administrative, technical, and organizational safeguards for personal and financial information. No internet service can guarantee absolute security, and you are responsible for keeping your login credentials secure and notifying the Marigold provider if you suspect unauthorized access.

We keep information for as long as needed to provide Marigold, comply with legal obligations, resolve disputes, maintain security, and support backups or audit records. When information is no longer needed, we will delete it or de-identify it where reasonably practicable, unless retention is required or permitted by law.

• You may update or delete information in Marigold where the product provides those controls.
• You may request access, correction, deletion, export, or restriction of your personal information by contacting the provider of your Marigold account.
• You may disconnect financial accounts, which stops future syncing but may not automatically delete previously imported transactions or records.
• You can control cookies through your browser, though disabling session cookies may prevent sign-in or core features from working.

Depending on where you live, you may have additional privacy rights. Marigold does not knowingly sell personal information or share it for cross-context behavioral advertising.

Marigold is a budgeting and personal finance tool, not a bank, broker, lender, tax advisor, or financial advisor. If a Marigold provider is subject to financial privacy, consumer protection, health privacy, or data security laws, that provider may need to give you additional notices or controls. If uploaded statements contain health-related or sensitive details, those details may be processed as part of the file import.

Marigold is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact the provider of your Marigold account.

We may update this policy from time to time. When changes are made, we will update the effective date above and provide additional notice when required by law or when the change is material.

Questions, requests, or concerns about this policy should be directed to the person, business, organization, or account administrator that provides your Marigold access.