This policy explains what Clarity (moneyleaks.io), operated by Official Velocity Ventures Inc., collects about you, why, who else touches it, and how to get rid of it. Clarity handles financial information, so the short version first: we do not sell your data, we do not share it for advertising, and we never have the ability to move money in your accounts.
What we collect
- Account details — email address, display name, and an encrypted password (handled by our authentication provider; we never see the plaintext).
- Financial information you type in — income, expenses, subscriptions, and anything else you describe when you ask for a report or use Ask Clarity.
- Bank account data, only if you choose to connect an account — via Plaid we receive read-only access to account names, balances, and transaction history (merchant, amount, date, category). We do not receive your banking credentials, and we cannot initiate payments or transfers.
- Reports and activity — the reports generated for you, which fixes you check off, and message counts used to enforce fair-use limits on Ask Clarity.
- Payment records — what you bought, when, and its status. Card numbers go directly to Stripe; they never reach our servers.
- Basic technical data — IP address and request metadata, used for security and rate limiting.
Why we use it
- To generate your reports and answer your questions in Ask Clarity.
- To run your account, process payments, and manage your subscription.
- To keep the service secure and prevent abuse (rate limits, usage caps, fraud checks).
- To fix problems and improve the product.
- To email you about your account, purchases, or material changes to these policies.
We do not use your financial data to build advertising profiles, and we do not sell or rent it to anyone.
Who we share it with
Only the service providers needed to run Clarity, each handling data on our instructions:
- Supabase — database and authentication (stores your account, reports, and purchase records).
- Vercel — application hosting.
- Stripe — payments, subscriptions, invoices. Stripe is the controller of your card data under its own policy.
- Plaid — bank connections, only if you connect an account. Plaid’s handling of your data is also covered by Plaid’s end user privacy policy.
- Anthropic — the AI models that generate reports and Ask Clarity answers.
- PostHog — product analytics, so we can see which parts of the service people use and where they get stuck. It records page views, feature usage, and anonymised session recordings in which text and form inputs are masked. No financial figures, report contents or bank data are sent to it — an event records that a report was generated, never what the report found.
About the AI processing: to produce a report or answer a question, the relevant financial details are sent to our AI provider as part of the request. This is done under a commercial agreement that does not permit your data to be used to train models. If you would rather no financial detail leave our systems this way, do not use the report or Ask Clarity features.
We may also disclose information where legally required, or to protect our rights, users, or the security of the service. If we are ever involved in a merger or acquisition, we will notify you before your data moves to a new controller.
Where it is stored
Data is stored on servers operated by the providers above, which may be located outside Ontario, Canada, including in the United States. Where required, transfers rely on the standard contractual protections those providers offer.
How long we keep it
- Account data and reports: until you delete your account.
- Bank connection: until you disconnect it or delete your account, whichever is first.
- Payment records: retained as long as required for tax and accounting law, even after account deletion.
- Security logs: a short rolling window.
Your choices and rights
- Disconnect your bank at any time — we stop receiving new transaction data immediately.
- Access or correct the information we hold about you.
- Delete your account and data — email support@moneyleaks.io and we will action it, subject to records we must keep by law.
- Export a copy of your reports and account data on request.
- Withdraw consent for optional processing, including the bank connection.
Depending on where you live, you may have additional rights under laws such as PIPEDA (Canada), the UK/EU GDPR, or US state privacy laws — including the right to complain to your local privacy regulator. We honour these requests regardless of where you live.
Security
Data is encrypted in transit and at rest by our providers. Access to production data is restricted, bank access tokens are stored server-side and never exposed to the browser, and database rules restrict every account to its own rows. No system is perfectly secure; if a breach ever affects your data, we will notify you and the relevant regulator as required by law.
Cookies
We use cookies that are strictly necessary to keep you signed in and to keep the service secure, plus a first-party analytics cookie that lets us count returning visits and understand how the service is used. We do not use advertising or cross-site tracking cookies, and we do not sell or share this data with advertisers.
Children
Clarity is not for anyone under 18. We do not knowingly collect data from children.
Changes
If we make a material change to this policy, we will notify account holders by email or in-app before it takes effect.
Contact
Privacy questions, access requests, or deletion requests: support@moneyleaks.io.