Privacy Policy

Connected Bank Data

When you connect a bank, Plaid shares account metadata, balances, and transaction history with Ezera. Ezera currently requests Plaid Transactions for budgeting and uses Plaid Balance only for user-initiated balance refreshes. Ezera does not request routing numbers, account numbers, identity verification, money movement, transfer permission, Signal, Liabilities, Statements, Assets, or Income. Plaid may send signed connection-health and transaction availability events to Ezera so a connection can show when it needs repair. Ezera stores a minimized event ledger and does not retain the raw webhook body.

Brokerage connections are separate and only available when Plaid Investments is enabled for the environment. Those connections store account metadata, investment balances, holdings, securities, and monthly account-level snapshots. Ezera does not request Plaid investment transactions.

Budgeting Data

Budget categories, monthly plans, notes, and transaction category corrections are stored in Ezera so budget views and dashboards can remain editable across sessions.

Onboarding Choices

Ezera may store optional setup choices for your primary goal, a coarse cash-range bucket, a coarse lockup-tolerance bucket, skipped setup steps, and when you reviewed the onboarding privacy explanation. Ezera does not require or store a precise cash amount for onboarding. Reviewing that explanation is not consent to Plaid, email, analytics, AI, advertising, or marketing. These choices are included in account export and deleted with the account.

Saved Finder Searches

When you explicitly save a Finder search, Ezera stores your label and the exact cash, reserve, current APY, state, timing, and account limit used for that comparison. Saved searches do not contain bank account identifiers and are not consent to Plaid, analytics, marketing, or advertising. They are included in account export and deleted with the account.

Dashboard Choices

Ezera may store which optional lower-page Dashboard snapshots you choose to hide. These choices do not hide the lead action, data warnings, Today queue, or action deck, and they are not analytics or marketing consent. They are included in account export and deleted with the account.

Reminders

In-app lockup reminders remain available in Ezera. Email lockup reminders require an explicit Profile Vault opt-in and can be turned off there at any time. Ezera stores the preference and minimized delivery-attempt status, retry timing, error code, and provider message reference; it does not store a second email copy in the delivery ledger. Push notifications are not enabled.

AI Assistant

If Ezera Assistant is enabled, your chat message and a compact summary of relevant stored Ezera data may be sent to Google Gemini to generate a response. Ezera does not send Plaid access tokens, raw encrypted Plaid payloads, raw account identifiers, or full raw transaction feeds to Gemini.

Product Analytics

Ezera does not currently collect product analytics. Any future analytics must use a separately approved provider, require your explicit choice, and accept only fixed, minimized product-event categories. Those events may not include account or transaction identifiers, email addresses, URLs, search terms, Assistant messages, notes, raw errors, or precise financial values. Turning analytics off must stop new product-event collection immediately.

Advertising

Ezera may show Google ads to signed-in free-tier users on deal discovery and deal-finder pages. Ezera does not send Plaid data, budget data, transaction feeds, holdings, investments, account balances, profile fields, deal filters, search terms, deposit amounts, or state values to Google for ad targeting. Ads are disabled outside the approved discovery surfaces and for premium, admin, anonymous, or incomplete-profile accounts.

Google may process browser or device information to serve, measure, secure, and limit advertising according to Google's advertising policies and any privacy choices available in your jurisdiction.

Investment Tracking Data

Investment account balances, holdings, monthly brokerage snapshots, and market dividend events for holding tickers are stored in Ezera so investment tracking can show last-known values, announced dividends, past dividends, and annual income estimates across sessions.

Storage And Disconnects

Plaid access tokens and raw Plaid payloads are encrypted before storage. Plaid Item, account, transaction, pending transaction, persistent account, security, and holding identifiers are stored as keyed hashes where Ezera needs stable matching without retaining raw Plaid identifiers.

Disconnecting a Plaid connection revokes Ezera access to the Plaid Item and clears the stored token, but may retain already-synced account, transaction, and investment records so budgeting history remains available. Deleting Plaid data is separate: it revokes Plaid access if needed and removes stored accounts, transactions, holdings, securities, snapshots, encrypted raw payloads, Plaid identifier hashes, and linked budget transaction overrides for that connection.

Your Controls

You can disconnect a Plaid connection or delete its stored Plaid-derived data from the Banking page. Account deletion and a portable JSON account export are available from Profile Vault. Deletion requests have a cancellation window before processing; processing revokes Android sessions and connected Plaid access before user-owned records are removed. Broader privacy requests can be made by contacting Ezera from the email address associated with your account. Ezera keeps this page updated as connected-account features change.