Privacy Policy

Last Updated: May 19, 2026

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored as a salted hash). We may also collect your phone number if you opt in to SMS notifications.

Financial Information via Plaid

To connect your credit cards and bank accounts, we use Plaid Technologies, Inc. Plaid acts as a secure intermediary between you and your financial institutions. When you link an account through Plaid:

• Your bank login credentials are entered directly into Plaid's interface and are never transmitted to or stored by PowerPay.
• Plaid provides us with read-only access to your account balances, transaction history, and account metadata.
• This data is used solely to provide the PowerPay service — tracking balances and sending statement alerts.
• Plaid's use of your information is governed by Plaid's Privacy Policy.

Usage Data

We automatically collect information about how you interact with our app, including pages visited, features used, timestamps, device type, browser type, operating system, and IP address. This helps us improve the service and diagnose issues.

Communications

If you contact us via email or in-app support, we retain those communications to respond to your inquiries and improve our support.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the PowerPay service
• Monitor your connected credit card balances daily
• Send SMS alerts before statement closing dates (with your consent)
• Process subscription payments via Stripe
• Send transactional emails related to your account (receipts, security alerts, service notices)
• Respond to your support requests
• Detect and prevent fraud or unauthorized access
• Comply with applicable legal obligations

We do not use your financial data to make lending decisions, sell you financial products, or share it with advertisers.

3. SMS Communications

If you opt in to SMS notifications, we use Twilio, Inc. to deliver text messages to your mobile phone number. By opting in, you consent to receive messages as described in our SMS Terms & Conditions.

Your phone number is used solely for sending the notifications you have requested. We do not share your phone number with third parties for their marketing purposes. You may opt out at any time by replying STOP to any message.

4. Payment Processing via Stripe

Subscription fees are processed by Stripe, Inc. When you subscribe, you are redirected to a Stripe-hosted checkout page. PowerPay does not collect, store, or have access to your full payment card number or CVV. Stripe's handling of your payment information is governed by Stripe's Privacy Policy.

We store your Stripe Customer ID and subscription status in order to manage your account and billing.

5. Information Sharing

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: With Plaid, Stripe, Twilio, and Supabase — our infrastructure and service providers — who are contractually bound to use your data only to provide services to us.
• Legal Requirements: When required by law, subpoena, court order, or to protect the rights, property, or safety of PowerPay, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of all or substantially all of our assets, with appropriate notice to you.
• With Your Consent: In any other circumstances with your explicit consent.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for fraud prevention.

Financial data obtained through Plaid is retained only as long as necessary for the service and is deleted promptly upon account disconnection or deletion.

7. Data Security

We take reasonable technical and organizational measures to protect your information, including:

• TLS/HTTPS encryption for all data in transit
• AES-256 encryption for data at rest via Supabase
• Row-level security policies so users can access only their own data
• No storage of raw bank credentials — handled entirely by Plaid
• Regular security reviews and access controls

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Opt out of SMS communications at any time by replying STOP
• Disconnect your financial accounts from the app at any time
• Export your data in a portable format

To exercise these rights, email us at support@powerpayment.app.

9. Children's Privacy

PowerPay is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy at this URL and, where appropriate, by sending an email or in-app notification. Your continued use of PowerPay after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: support@powerpayment.app
• Website: powerpayment.app
• Owner: Trevor Heaney, PowerPay