← Back to Home

Financial Data & Plaid Privacy Addendum

Effective Date: May 2026 | This Addendum supplements the DatNova Master Privacy Policy.

1. Introduction, Scope, and Precedence

This Addendum exclusively governs the collection, processing, and protection of financial transaction data obtained through DatNova's integration with Plaid Inc. ("Plaid"). In the event of a conflict between the DatNova Master Privacy Policy and this Addendum regarding Plaid-derived data, this Addendum shall explicitly supersede and strictly control.

2. Connection & Read-Only Access

By connecting your bank account via the DatNova Plaid integration, you grant DatNova and Plaid read-only access to your transaction history, account balances, and merchant data. DatNova strictly never sees, routes, stores, or processes your underlying bank authentication credentials (usernames or passwords).

3. Strict Non-Sale of Financial Data

Notwithstanding any provisions in the DatNova Master Privacy Policy regarding the commercialization or sharing of data with third parties, DatNova explicitly DOES NOT sell, rent, lease, or distribute any personal financial transaction data obtained via the Plaid API to external marketing agencies, data brokers, or unauthorized third parties. Financial data is strictly utilized for the provisioning of the User's proprietary accounting dashboard.

4. Data Security & Encryption

Your financial data is encrypted at rest using AES-256 standards and transmitted via Transport Layer Security (TLS 1.2 or higher). DatNova strictly adheres to the data minimization principles outlined in the Gramm-Leach-Bliley Act (GLBA), extracting only the metadata required to provision the categorization service.

5. Data Retention & Right to Revoke

You maintain full, sovereign control over your linked financial data. You may disconnect your banking institution at any time from within the DatNova dashboard. Upon disconnection or verified account termination, DatNova will immediately drop the associated Plaid Access Tokens and permanently purge the synchronized financial telemetry from our active databases within thirty (30) days.