How Savvy works with your data — today
Plain facts about where AI sits in Savvy right now — what it reads today, and what it doesn't.
- Most of Savvy's AI reads card data, not your data. The heavy lifting happens on issuer material — benefit guides, terms pages, fine print — building the catalog of what every card offers. That work reads issuer pages, not your accounts.
- Your transactions are matched by Savvy's own deterministic engine. Bank activity syncs in via Plaid and gets matched to benefits by rules Savvy wrote — code, not a model. There is no AI model in that path today.
- AI processes the content you send to Savvy. Forward an email — a gift card, a receipt, a trial confirmation — or text a question, and AI reads that content to do the job you asked.
- All AI processing happens via API — and API data is not used to train the providers' models.
The word "today" is deliberate. Savvy keeps shipping, and future features may put AI to work in more places. When that happens, you'll read it here first: how we use your data changes on this page before it changes in the product.
Who we work with — and why
Savvy doesn't run alone. A small set of partners powers the product, and each one gets the minimum it needs to do its job. Here's the roster:
| Partner | What it does |
|---|---|
| Plaid | Read-only bank connection. Savvy never sees or stores your bank credentials. |
| Clerk | Secure sign-in. |
| Supabase | Encrypted data storage. |
| Twilio | The texts Savvy sends and receives. |
| OpenAI | AI that reads card catalogs and processes content you send — via API, not used to train models. |
| Cloudflare | Hosting and email routing. |
| Render | Backend hosting. |
| Stripe | Subscription payments. Your full card number goes to Stripe, never to Savvy. |
Bring your own AI
Your benefits shouldn't be locked inside our app. Savvy provides an MCP server — the open standard that lets AI assistants connect to outside tools — so you can plug Savvy into the assistant you already use.
Connect Claude or ChatGPT and ask it to check your benefits: which card to use tonight, what's expiring this month. Your assistant reads your Savvy data under your own account and permission — and you can revoke that access at any time.
Set-up guide: Connect Savvy to your AI.
The legal details
Everything above, in policy form — what we collect, how we use it, the rights you hold, and how to reach us. This is the full Privacy Policy of Savvy.
Overview
Savvy ("we," "us," or "our") operates the Savvy app and website at withsavvy.ai. We built Savvy to help you find money you've already earned — expiring credits, forgotten gift cards, pending refunds, and unwanted subscriptions.
This Privacy Policy explains what personal information we collect, how we use it, and your choices. By using Savvy, you agree to the practices described here.
Information We Collect
We collect information you provide directly, information from your connected financial accounts, and standard technical data from your use of the app.
| Category | What This Includes | How We Get It |
|---|---|---|
| Account Info | Name, email address, password (hashed) | You provide it during signup |
| Financial Data | Account balances, transaction history, recurring charges | Via Plaid, with your consent |
| Card & Benefits | Credit card benefits, expiring credits, gift card balances | Derived from your transactions + your input |
| Usage Data | Features used, pages viewed, session timestamps | Automatically collected |
| Device Info | Browser type, OS, IP address, device identifiers | Automatically collected |
| Communications | Support emails, feedback you submit | You provide it |
| Forwarded Email Content | Receipts, offers, and benefit emails you choose to forward to your personal Savvy address, including their text content | You forward them to us |
We do not collect Social Security numbers, government-issued ID numbers, or full payment card numbers.
How We Use Your Information
We use your information only to operate and improve Savvy. Specifically:
- Provide the service — Detect expiring credits, track refunds, identify forgotten charges and gift cards, and surface alerts.
- Personalize your experience — Show your net worth, suggest which card to use, and tailor recommendations to your accounts.
- Send notifications — Alert you to time-sensitive items like expiring credits or overdue refunds. You can adjust these in Settings.
- Improve Savvy — Analyze usage patterns in aggregate (never linked to individual identities) to improve features.
- Communicate with you — Respond to support requests and send product updates. You can unsubscribe from marketing at any time.
- Prevent fraud and abuse — Detect unauthorized access and comply with legal obligations.
We do not use your financial data for advertising, sell it to data brokers, or share it with third parties for their own marketing purposes.
Plaid & Financial Data
To connect your bank accounts, Savvy uses Plaid Technologies, Inc. Plaid is a trusted financial data network used by Venmo, Robinhood, Coinbase, and thousands of other apps.
When you connect a financial account through Plaid:
- You authenticate directly with your bank — Savvy never sees your banking username or password.
- Plaid transmits your financial data to us using bank-level encryption.
- Your data is governed by both this Privacy Policy and Plaid's End User Privacy Policy.
- You can revoke Plaid access at any time — in Savvy under Settings → Connected Accounts, or directly at my.plaid.com.
Financial data retrieved via Plaid is encrypted at rest (AES-256) and in transit (TLS 1.2+) at all times.
SMS & Text Messaging
When you opt in to receive text messages from Savvy, you agree to receive recurring automated benefit reminders and account notifications.
- Opt-in: You must explicitly opt in inside your signed-in account, on the Notification Settings screen. Consent is given by tapping a button labelled "Turn On Texts", with the full disclosure shown directly above it — there is no pre-selected checkbox anywhere in the flow, and texts stay off until you tap. If your mobile number was already verified when you created your account, that number is shown to you and the tap is all that is required. Otherwise you enter your own number and then confirm it from that device — either by sending a text (such as "START") to Savvy's number, or by entering a one-time code we send you. We only send texts to numbers confirmed one of these two ways.
- Consent language: The disclosure shown directly above the "Turn On Texts" button reads: "By tapping Turn On Texts you agree to receive account & benefit-reminder texts from Savvy at this number. Consent isn't a condition of use. Msg frequency varies; Msg & data rates may apply. Reply STOP to cancel, HELP for help." Tapping that button is the affirmative consent act, not a checkbox. Numbers verified through Clerk at sign-up skip the confirmation-text step described above; all other numbers must confirm possession by sending START or VERIFY (or entering the one-time code) before any message is sent.
- Message Types: We send recurring benefit-reminder texts and account-related notifications.
- Privacy of Opt-in Data: Your mobile phone number, SMS consent, and text messaging opt-in data will never be sold, shared, or disclosed to third parties for marketing or promotional purposes.
- Opt-out & Help: You can cancel the SMS service at any time by replying "STOP" to any text message from us. For assistance, reply "HELP". Message and data rates may apply.
Sharing Your Information
We do not sell your personal information. We share data only in the following limited circumstances:
- Service providers — Trusted vendors who help us operate Savvy (e.g., cloud hosting, email delivery, analytics). These providers are contractually required to protect your data and may not use it for their own purposes. For more detail on key vendors we work with, see Who we work with above.
- Plaid — To facilitate bank account connectivity as described above.
- Household members (if you choose) — If you invite a household member, they can see shared accounts and joint balances. Private accounts remain hidden. You control what is shared.
- Legal requirements — If required by law, court order, or to protect the rights and safety of Savvy or others, we may disclose information as legally required.
- Business transfers — In the event of a merger, acquisition, or sale of all or substantially all assets, your data may be transferred. We will notify you via email before your data is transferred and becomes subject to a different privacy policy.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide the service. Specifically:
- Account data is retained for the duration of your account and deleted within 30 days of account closure.
- Financial transaction data from Plaid is retained for up to 7 years following account closure to comply with applicable financial regulations.
- Usage and analytics data is retained for up to 24 months in identifiable form, after which it is anonymized or deleted.
You may request deletion of your account and associated data at any time by emailing support@withsavvy.ai. We will process deletion requests within 30 days, subject to any legal retention requirements.
Security
We take security seriously. Measures we have in place include:
- All data encrypted at rest (AES-256) and in transit (TLS 1.2+)
- Multi-factor authentication available on every account
- Role-based access controls — only authorized employees can access production systems
- Automated dependency and code-security scanning on every change, plus secret-scanning across our repositories
- Bank-level connectivity via Plaid (your banking credentials are never stored by Savvy)
Your Rights
Depending on where you live, you may have the following rights regarding your personal information. To exercise any of these rights, email us at support@withsavvy.ai.
Request a copy of the personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Request deletion of your personal data, subject to legal retention requirements.
Receive your data in a structured, machine-readable format.
Opt out of marketing communications at any time via unsubscribe link or email.
Disconnect bank accounts and revoke Plaid access at any time in Settings.
California residents have additional rights under the CCPA/CPRA, including the right to know, delete, and opt out of sale of personal information. We do not sell personal information. To submit a verifiable consumer request, email support@withsavvy.ai.
EEA & UK Users (GDPR)
If you are located in the European Economic Area or the United Kingdom, the GDPR (and UK GDPR) gives you additional rights, and we process your personal data only where we have a legal basis to do so:
- Contract: most processing — mapping your benefits, matching transactions, sending the reminders you signed up for — is necessary to provide the service you asked us for.
- Consent: connecting a bank account via Plaid, turning on text messages, and forwarding emails to Savvy each happen only after your explicit opt-in, which you can withdraw at any time.
- Legitimate interests: securing the service, preventing abuse, and understanding aggregate usage — always balanced against your rights.
In addition to the rights listed above, you may object to processing based on legitimate interests, request restriction of processing, and lodge a complaint with your local supervisory authority. Savvy is operated from the United States, and your data is stored and processed there; where data is transferred from the EEA or UK we rely on our processors' standard contractual clauses and equivalent safeguards.
To exercise any of these rights, email support@withsavvy.ai — we respond to verified requests within 30 days.
Children's Privacy
Savvy is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at support@withsavvy.ai and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (sent to the address associated with your account) and update the "Last updated" date at the top of this page at least 30 days before the changes take effect.
And the standing commitment from the top of this page applies here too: how we use your data changes on this page before it changes in the product.
Your continued use of Savvy after any changes constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you may close your account.
Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:
- Email: support@withsavvy.ai
- Security issues: security@withsavvy.ai
We will respond to all privacy-related requests within 5 business days.