Privacy Policy

Last updated: July 21, 2026

This policy explains how Wistr.net and Wistr Finance (together, “Wistr,” “we,” “us,” or “our”) collect, use, disclose, retain, and protect information when you use finance.wistr.net or another Wistr-hosted application (the “Service”).

1. Information We Collect

We collect information needed to authenticate you and provide the Service.

Account and authentication information, such as your email address, name when provided by your identity provider, application role, and authentication and security-log information.
Financial information you choose to connect through Plaid, which may include your financial institution name, account name and type, masked account number, current and available balances, credit limit, transactions, merchant information, transaction categories, and connection status.
Service and security information, such as IP address, browser or device information, audit logs, and records of actions taken in the Service.

We use Plaid to connect to financial institutions. Plaid, not Wistr, handles your financial-institution login credentials. We do not receive or store your online banking username or password.

2. How We Use Your Information

To authenticate users and control access to the Service.
To provide personal-finance features such as account views, spending categorization, cash-flow insights, and credit-card tracking.
To maintain, secure, troubleshoot, and improve the Service; prevent unauthorized access; and comply with applicable legal obligations.

We do not sell consumer financial information. We do not use Plaid data for lending, credit underwriting, payments, or identity verification.

3. How We Share Information

We share information only as needed to operate the Service: with Plaid to establish and maintain the financial connection you authorize; with Cloudflare and other service providers that host, secure, or support the Service; when required by law; or with your direction or consent. Our service providers may process information only to provide services to us.

4. Data Retention and Deletion

We retain connected financial information while you maintain the relevant connection. You can use the in-app Disconnect & delete control to revoke the Plaid connection and delete the related locally stored connection token, account data, transaction data, sync records, and Plaid webhook records. You may also request deletion or ask questions by emailing security@wistr.net.

We retain limited security and audit records for up to 12 months and Plaid webhook records for up to 30 days, unless a longer period is needed to meet a legal obligation, resolve a dispute, or investigate a security incident. Backup copies expire according to our cloud provider’s backup lifecycle.

5. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect information. These include encryption in transit, managed encryption at rest, access controls, and encryption of Plaid access tokens before storage. No method of transmission or storage is completely secure.

6. Your Choices and Rights

You may choose not to connect a financial institution, disconnect a linked institution, or contact us to request access, correction, or deletion of your personal information. Depending on where you live, you may have additional privacy rights under applicable law. We will verify requests before acting on them.

7. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this policy as the Service or applicable law changes. We will post the updated version here and revise the “Last updated” date.

9. Contact

For privacy or security questions, contact security@wistr.net.