Privacypolicy.

This policy explains how OneFolio LLC, a California limited liability company (“OneFolio,” “we,” “us”), handles your personal information. OneFolio LLC is the controller of the personal information described here. Our mailing address is 1401 21st St Ste R, Sacramento, CA 95811.

We collect the minimum data necessary to give you an honest picture of your money and to recommend useful next steps. We do not sell your data. We do not show ads. We do not share your transactions with anyone other than the infrastructure providers we need to run the service. You can disconnect, download, or delete your data at any time.

Information you give us directly:

• Your name and email address when you sign up. If you sign up or sign in with Google, Google shares your name, email address and profile picture with us.
• Subscription billing information (handled by Stripe; we never see full card numbers).
• Notes, tags, manual categories, budgets, goals, and saved scenarios you create inside OneFolio.
• Questions you ask Folio, our AI assistant, and, on the Core plan, facts Folio saves from your conversations, which you can review and delete in Settings → Agent memory. Section 4 explains what we send to our AI providers.
• Your Money IQ quiz answers and results.
• Feedback you send us from the app, which we keep with your email address and forward to our support inbox.
• Your email address, if you join our email list or a waitlist on our site, and which form you used. We keep it in our database and with our email provider, Resend.
• OneFolio browser extension (not yet available). When it is available, if you use the OneFolio browser extension to import a casino loyalty program, the extension will read your tier, tier credits, points, credit balances and offers from the program page you have open, only when you click Read this page, and will send them to OneFolio only when you click Send. It will never extract, store or send your password, member number, name, address or payment details, and it will never act on the program’s site. You will be able to unpair it and delete any import at any time in Play.

Information we receive through Plaid when you connect a financial account:

• Account information: institution, account name, type, last four digits, current/available balances.
• Transactions: date, amount, merchant name, raw description, category. We receive up to 90 days of past transactions when you connect, then new ones as they post. For investment accounts we receive up to 2 years of past investment transactions. Your institution may provide less.
• Recurring transactions: Plaid’s detected list of subscriptions and bills.
• Liabilities: APR, statement balance, due date, and minimum-payment data for credit cards, mortgages, and student loans.
• Investments: holdings (symbol, quantity, market value) and investment transactions on connected brokerage accounts.
• Enriched merchant data: Plaid’s normalized merchant names and logos.
• Gaming transactions. We flag gaming-related transactions (sportsbooks, casinos, poker rooms, prediction markets) in your Cash Flow and in Folio’s answers, using the bank data you already share with us. You can turn this off in Settings → Privacy → Flag gaming transactions. This never goes to any gaming operator. OneFolio Play (coming soon): when Play is available and you turn it on, we will use the same classifications to show your sessions, bankroll and gaming finances.

You authenticate directly with Plaid (or with your financial institution through Plaid); we never see your bank login credentials. Plaid’s relationship with you is also governed by Plaid’s own End User Privacy Policy.

Information we collect automatically:

• Basic device + browser information (IP address, user agent) for security, fraud prevention, and rate-limiting.
• Application logs of actions you take (insight dismissals, settings changes) so we can debug issues and audit changes you ask about.
• Product events (pages viewed, features used). We record these tied to your account in our own database to run and improve OneFolio. We don’t load third-party analytics on pages inside the app.
• On our marketing site and sign-in and signup pages only, web analytics and ad-measurement cookies (Google Analytics, the Meta pixel) that tell us which pages and which ads bring people to OneFolio. You can opt out of ad measurement at any time (see §13).

We use the data above to:

• Provide the OneFolio service: net-worth tracking, spending breakdowns, budgets, goals, debt payoff plans, AI-grounded insights, and credit-card recommendations.
• Improve the service: study the product events described above to find what works and what doesn’t. This never involves selling or sharing your individual data.
• Authenticate you and protect your account from fraud.
• Communicate with you about account activity, billing, security and material product changes, and send the weekly spending report, which you can turn off in Settings → Notifications. Promotional email is opt-in only.
• Comply with our legal obligations.

We do not sell your data. We do not rent your data. We do not provide your transaction history to advertisers, data brokers, or marketing networks. We do not use your transaction data to build advertising profiles, on or off OneFolio. This applies to aggregated, anonymized, and de-identified data as well.

Our revenue comes from your subscription. OneFolio does not currently earn a commission on any card or loan; if that changes, we will update our Affiliate Disclosure first.

We share data only with infrastructure providers we need to operate the service. We require our providers to protect your data under their terms. The full list:

• Plaid Inc.: financial-data network. Provides the connections to your bank, brokerage, and credit-card accounts. Plaid is a separate data controller for the data it collects from you directly during the link flow; OneFolio LLC is the controller for the data Plaid passes back to us. Plaid’s policy: plaid.com/legal/#end-user-privacy-policy
• Anthropic, PBC: provider of Claude, the AI model that answers your questions in Folio, writes the Insights brief, daily check-ins and summaries, runs the What-If simulator, looks up and suggests cards, matches imported category names, saves useful facts from your conversations and classifies recurring transactions. Today Claude performs every AI task in OneFolio.
• Google LLC: provider of Gemini. We may use Gemini to write the Insights brief, daily check-ins and summaries, run the What-If simulator, look up and suggest cards, match imported category names and screen questions sent to Folio, and only under Google’s paid terms, which bar Google from using the data to improve its products. For those tasks Gemini would receive the same kinds of data as Anthropic. Gemini is switched off today, so Google receives none of this data. Google also provides Google Analytics on our marketing site and sign-in and signup pages (see §13), which never receives your financial data, and Google sign-in if you choose Continue with Google.
• Meta Platforms, Inc.: ad measurement on our marketing site and sign-in and signup pages only (see §13). Meta receives browser identifiers, your IP address and browser type, and the fact that a visit, a signup, the start of a checkout or the first payment on a subscription happened, with the plan and price for the last two; never your financial data, name, email or bank name. Opt out at Do Not Sell or Share My Personal Information.
• Stripe, Inc.: subscription billing and payment processing. Stripe receives your email address and payment details. We attach your OneFolio user ID, your plan, and the IP address, browser and any Meta or Google Analytics cookie ids from your checkout to your subscription there.
• Functional Software, Inc. (Sentry): error and performance monitoring. When something in OneFolio fails, and for a sample of ordinary requests, a technical report goes to Sentry so we can find and fix problems. Reports can include your OneFolio user ID and the address of the page you were on, without its query, but not your name or email.
• Infrastructure providers: encrypted database and authentication hosting in the United States, application hosting and CDN, transactional email delivery (account emails such as confirming your address and resetting your password, billing emails, the weekly spending report, which can include spending figures and merchant names, feedback you send us, and our email list), and rate limiting (short-lived counters keyed by your user ID or IP address).

What our AI providers receive.We send data to our AI providers when you use AI features and when OneFolio runs them in the background: the Insights brief after your accounts sync, the daily check-in and the weekly, monthly and yearly summaries on their schedule, and the sorting of your recurring charges when you open Insights. Each time, we send your question as written if there is one, recent messages from the same conversation, and the financial data the task needs. This can include your account and institution names, account types, last four digits, balances and credit limits; transactions (date, amount, merchant and description); income, spending, recurring charges, and investment and net worth totals; debts with their interest rates and minimum payments, budgets and goals; your Money IQ quiz results; and, on the Core plan, facts Folio has saved from your conversations. We do not send your name, email, bank login or OneFolio user ID. When you look up a card, we send only the card’s name and, if you gave one, its issuer. If no card in our catalog fits your spending, we send your top spending categories and monthly averages, and which catalog cards you already have, to suggest one. When you import history from another app, we send category names we don’t recognize so they can be matched to ours.

We may also share information (i) with you, when you direct us to (e.g., downloading your data); (ii) when required by law or court order, with notice to you to the extent we’re legally permitted; (iii) in connection with a corporate transaction (merger, acquisition, financing), in which case we’ll require the acquirer to honor this Privacy Policy.

Plaid is not a “consumer reporting agency” under the Fair Credit Reporting Act (FCRA), and the data we receive from Plaid is not a “consumer report.” We do not use it (and you may not use it) for any FCRA-covered purpose, including credit, insurance, employment, housing, or government-benefit decisions.

We keep your account, transaction, and budget data while your OneFolio account is active so we can show you trends over time.

Disconnecting an institution.When you disconnect an institution in Settings → Accounts, we revoke our Plaid access to it and delete that institution’s accounts, transactions, balances, statements and liabilities from OneFolio at once. If you revoke OneFolio’s access at my.plaid.com instead, we delete the same data when Plaid tells us.

Delete all data. Settings → Privacy → Delete all data removes all your financial data and keeps your login, settings and subscription.

Delete account. Settings → Privacy → Delete account disconnects every bank at Plaid, cancels any subscription immediately with no refund, deletes your data from our active systems at once, and deletes your login.

After a deletion, copies may remain in encrypted backups for up to 90 days before they roll off. We also keep:

• A record that you accepted our Terms and this policy (the email address, date, IP address and browser you used), with its link to your account removed.
• A record of each auto-renewal disclosure you agreed to at checkout (the plan, price, disclosure text, checkout session, date, IP address and browser), with its link to your account removed, so a disputed charge can be traced to what you were shown.
• Billing and invoice records held by Stripe, as tax and accounting law requires.
• Your customer record at Stripe and the details we attached to your subscription at checkout: your OneFolio user ID, plan and billing period, the IP address and browser you checked out from, and any Meta or Google Analytics cookie ids your browser carried.

Security audit logs are deleted with your account. While your account is open, we delete them once they are 1 year old.

You have the right at any time to:

• Know what categories of information we have about you (this page; ask us for specifics at admin@1folio.ai).
• Access and download your data at Settings → Privacy → Download my data: your transactions, accounts, budgets and goals as CSV files in one zip file, on every plan.
• Correct data: most categorizations and settings are user-editable in app; for anything else, email us.
• Delete your financial data at Settings → Privacy → Delete all data, your whole account at Settings → Privacy → Delete account, or either by emailing admin@1folio.ai (see §6).
• Disconnect any institution from Settings → Accounts. This revokes our Plaid access to it and deletes that institution’s data from OneFolio at once (see §6).
• Stop AI processing: some AI features run in the background on the data you keep in OneFolio (see §4), so to stop AI processing, delete your data or your account in Settings → Privacy. Disconnecting an institution in Settings → Accounts deletes its data, so it is no longer sent.
• Opt out of ad measurement on our marketing site and sign-in and signup pages at Do Not Sell or Share My Personal Information.
• Manage Plaid’s authorization separately through Plaid’s consumer dashboard at my.plaid.com.

We don’t discriminate against you for exercising any of these rights. We respond to verifiable requests within the timelines required by applicable law (usually 45 days, 5 business days for revocation).

California residents have additional rights under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020:

• The right to know the categories of personal information collected, the sources, the business purpose, and the categories of third parties with whom it’s shared (all disclosed in §1 and §4 above).
• The right to delete personal information (see §7).
• The right to correct inaccurate personal information (see §7).
• The right to limit use and disclosure of sensitive personal information.
• The right to opt out of the sale or sharing of personal information. We do not sell personal information. Our marketing site and sign-in and signup pages use Google Analytics and the Meta pixel to measure which pages and ads bring people to OneFolio, which California law may treat as “sharing” for cross-context behavioral advertising. You can opt out at any time at Do Not Sell or Share My Personal Information, and we treat the Global Privacy Control browser signal as an opt-out (see §13). Your financial data is never part of this.
• The right to non-discrimination for exercising these rights.

To exercise these rights, email admin@1folio.ai. We’ll verify your identity by confirming you control the email address on the account, and respond within 45 days.

Because we handle financial information, we comply with applicable provisions of the Gramm-Leach-Bliley Act and its implementing regulations. That includes giving you this privacy notice, securing your data, and not disclosing nonpublic personal information to non-affiliated third parties for marketing purposes.

We maintain a written information-security program approved by our leadership. It includes administrative, technical, and physical controls designed to (i) protect the confidentiality and integrity of your data, (ii) protect against unauthorized access or use, and (iii) ensure proper disposal when data is no longer needed. The program is appropriate to our risk profile and the nature of the data we hold; we use AICPA Trust Services Criteria and NIST 800-53 as our reference frameworks.

All data at rest is encrypted; all data in transit uses TLS. Plaid access tokens are additionally encrypted in our application with AES-256-GCM, using a dedicated key used for nothing else. Our database and authentication are hosted in the United States. We use up-to-date antivirus/anti-malware tools on systems that have access to user data.

Security incident notification:If we discover a security incident affecting your data, we will notify you without undue delay and within the timeframes required by applicable state and federal law. We’ll also notify Plaid within 12 hours of discovery, per our contractual obligation to them.

Vulnerability reports are welcome at admin@1folio.ai. We respond within 2 business days and acknowledge responsible disclosure.

OneFolio is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe we’ve received data from someone under 18, contact us at admin@1folio.ai and we will delete it.

OneFolio is operated from and intended for use within the United States. If you access OneFolio from outside the US, you understand your information will be transferred to and processed in the US, where data protection laws may differ from those in your country.

We use a small number of cookies, and none of them carry financial data.

• Strictly necessary. Your sign-in session, and the cookie that remembers your choice if you opt out of ad measurement. Without them you could not stay signed in and we could not honor your opt-out.
• Product analytics (our own). We may store a random id in a cookie for up to a year so that events from one browser count as one person, for example one signup rather than several. It goes only to our own servers, never to Google or Meta, and it clears with your other cookies.
• Analytics (marketing site and sign-in and signup pages only). Google Analytics, to see which pages people read and where they arrive from, and to count signups, checkouts started and first payments (with plan and price).
• Ad measurement (marketing site and sign-in and signup pages only). The Meta pixel, to tell Meta that a click on one of our ads led to a visit, a signup or the start of a checkout, so we can see which ads work. When the first payment on a subscription goes through, we also report it from our server to Meta and Google, using the identifiers captured when you started checkout. Neither the Meta pixel nor Google Analytics receives your name, email, bank connections, balances, or transactions, and neither do the purchase reports from our server.

We load Google Analytics and the Meta pixel only on our marketing site and sign-in and signup pages, never on pages inside the app. To opt out of ad measurement everywhere, visit Do Not Sell or Share My Personal Information; your choice is stored in a cookie for one year. If your browser sends Global Privacy Control, we don’t load the Meta pixel, we tell Google Analytics not to use your visit for advertising, and we don’t report your purchase to Meta or Google. You can also block cookies in your browser settings. Inside the app we also keep some settings and copies of results in your browser’s local storage, such as your theme, tips you dismissed and which merchants look recurring; they stay on your device.

We may update this Privacy Policy from time to time. If a change is material (for example, a change to the categories of data we collect or the third parties we share it with), we’ll notify you in-app and by email at least 30 days before the change takes effect. The version of this policy in effect when you use the service is the version that governs.

Questions, concerns, or requests: admin@1folio.ai. We aim to respond within 2 business days; verifiable rights requests within the timelines required by applicable law. By mail: OneFolio LLC, 1401 21st St Ste R, Sacramento, CA 95811.