Privacy & Trust

Your data has one job:
working for you.

We use it to map your benefits, match your transactions, and nudge you before money expires. Never sold. Never used for ads. Shared only with the partners that run Savvy — each getting the minimum it needs.

Effective: January 1, 2025 Last updated: June 12, 2026 Savvy Financial Technologies, Inc.

Our standing commitment How we use your data changes on this page before it changes in the product.

The facts

How Savvy works with your data — today

Plain facts about where AI sits in Savvy right now — what it reads today, and what it doesn't.

  • Most of Savvy's AI reads card data, not your data. The heavy lifting happens on issuer material — benefit guides, terms pages, fine print — building the catalog of what every card offers. That work reads issuer pages, not your accounts.
  • Your transactions are matched by Savvy's own deterministic engine. Bank activity syncs in via Plaid and gets matched to benefits by rules Savvy wrote — code, not a model. There is no AI model in that path today.
  • AI processes the content you send to Savvy. Forward an email — a gift card, a receipt, a trial confirmation — or text a question, and AI reads that content to do the job you asked.
  • All AI processing happens via API — and API data is not used to train the providers' models.

The word "today" is deliberate. Savvy keeps shipping, and future features may put AI to work in more places. When that happens, you'll read it here first: how we use your data changes on this page before it changes in the product.

The partners

Who we work with — and why

Savvy doesn't run alone. A small set of partners powers the product, and each one gets the minimum it needs to do its job. Here's the roster:

Partner What it does
PlaidRead-only bank connection. Savvy never sees or stores your bank credentials.
ClerkSecure sign-in.
SupabaseEncrypted data storage.
TwilioThe texts Savvy sends and receives.
OpenAIAI that reads card catalogs and processes content you send — via API, not used to train models.
CloudflareHosting and email routing.
RenderBackend hosting.
The feature

Bring your own AI

Your benefits shouldn't be locked inside our app. Savvy provides an MCP server — the open standard that lets AI assistants connect to outside tools — so you can plug Savvy into the assistant you already use.

Connect Claude or ChatGPT and ask it to check your benefits: which card to use tonight, what's expiring this month. Your assistant reads your Savvy data under your own account and permission — and you can revoke that access at any time.

The policy

The legal details

Everything above, in policy form — what we collect, how we use it, the rights you hold, and how to reach us. This is the full Privacy Policy of Savvy Financial Technologies, Inc.

01

Overview

Savvy Financial Technologies, Inc. ("Savvy," "we," "us," or "our") operates the Savvy app and website at withsavvy.ai. We built Savvy to help you find money you've already earned — expiring credits, forgotten gift cards, pending refunds, and unwanted subscriptions.

This Privacy Policy explains what personal information we collect, how we use it, and your choices. By using Savvy, you agree to the practices described here.

🔒
The short version: We access your financial data only to provide Savvy's features. We never sell your personal information. We use Plaid for read-only bank connectivity — we can never move money on your behalf.
02

Information We Collect

We collect information you provide directly, information from your connected financial accounts, and standard technical data from your use of the app.

Category What This Includes How We Get It
Account Info Name, email address, password (hashed) You provide it during signup
Financial Data Account balances, transaction history, recurring charges Via Plaid, with your consent
Card & Benefits Credit card benefits, expiring credits, gift card balances Derived from your transactions + your input
Usage Data Features used, pages viewed, session timestamps Automatically collected
Device Info Browser type, OS, IP address, device identifiers Automatically collected
Communications Support emails, feedback you submit You provide it

We do not collect Social Security numbers, government-issued ID numbers, or full payment card numbers.

03

How We Use Your Information

We use your information only to operate and improve Savvy. Specifically:

  • Provide the service — Detect expiring credits, track refunds, identify forgotten charges and gift cards, and surface alerts.
  • Personalize your experience — Show your net worth, suggest which card to use, and tailor recommendations to your accounts.
  • Send notifications — Alert you to time-sensitive items like expiring credits or overdue refunds. You can adjust these in Settings.
  • Improve Savvy — Analyze usage patterns in aggregate (never linked to individual identities) to improve features.
  • Communicate with you — Respond to support requests and send product updates. You can unsubscribe from marketing at any time.
  • Prevent fraud and abuse — Detect unauthorized access and comply with legal obligations.

We do not use your financial data for advertising, sell it to data brokers, or share it with third parties for their own marketing purposes.

04

Plaid & Financial Data

To connect your bank accounts, Savvy uses Plaid Technologies, Inc. Plaid is a trusted financial data network used by Venmo, Robinhood, Coinbase, and thousands of other apps.

🏦
Read-only access only. Savvy has no ability to move, transfer, or withdraw funds from your accounts. We access transaction history and balances to power Savvy's features — nothing else.

When you connect a financial account through Plaid:

  • You authenticate directly with your bank — Savvy never sees your banking username or password.
  • Plaid transmits your financial data to us using bank-level encryption.
  • Your data is governed by both this Privacy Policy and Plaid's End User Privacy Policy.
  • You can revoke Plaid access at any time — in Savvy under Settings → Connected Accounts, or directly at my.plaid.com.

Financial data retrieved via Plaid is encrypted at rest (AES-256) and in transit (TLS 1.2+) at all times.

05

SMS & Text Messaging

When you opt in to receive text messages from Savvy, you agree to receive recurring automated benefit reminders and account notifications.

  • Opt-in: You must explicitly opt in by providing your phone number and verifying it via a one-time code sent to your device.
  • Message Types: We send recurring benefit-reminder texts and account-related notifications.
  • Privacy of Opt-in Data: Your mobile phone number, SMS consent, and text messaging opt-in data will never be sold, shared, or disclosed to third parties for marketing or promotional purposes.
  • Opt-out & Help: You can cancel the SMS service at any time by replying "STOP" to any text message from us. For assistance, reply "HELP". Message and data rates may apply.
06

Sharing Your Information

We do not sell your personal information. We share data only in the following limited circumstances:

  • Service providers — Trusted vendors who help us operate Savvy (e.g., cloud hosting, email delivery, analytics). These providers are contractually required to protect your data and may not use it for their own purposes. For more detail on key vendors we work with, see Who we work with above.
  • Plaid — To facilitate bank account connectivity as described above.
  • Household members (if you choose) — If you invite a household member, they can see shared accounts and joint balances. Private accounts remain hidden. You control what is shared.
  • Legal requirements — If required by law, court order, or to protect the rights and safety of Savvy or others, we may disclose information as legally required.
  • Business transfers — In the event of a merger, acquisition, or sale of all or substantially all assets, your data may be transferred. We will notify you via email before your data is transferred and becomes subject to a different privacy policy.
07

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the service. Specifically:

  • Account data is retained for the duration of your account and deleted within 30 days of account closure.
  • Financial transaction data from Plaid is retained for up to 7 years following account closure to comply with applicable financial regulations.
  • Usage and analytics data is retained for up to 24 months in identifiable form, after which it is anonymized or deleted.

You may request deletion of your account and associated data at any time by emailing support@withsavvy.ai. We will process deletion requests within 30 days, subject to any legal retention requirements.

08

Security

We take security seriously. Measures we have in place include:

  • All data encrypted at rest (AES-256) and in transit (TLS 1.2+)
  • Multi-factor authentication required to access your account
  • Role-based access controls — only authorized employees can access production systems
  • Regular vulnerability scans across all infrastructure
  • Bank-level connectivity via Plaid (your banking credentials are never stored by Savvy)
⚠️
No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable means to protect your information, we cannot guarantee absolute security. Please notify us immediately at security@withsavvy.ai if you suspect any unauthorized access.
09

Your Rights

Depending on where you live, you may have the following rights regarding your personal information. To exercise any of these rights, email us at support@withsavvy.ai.

👁️ Access

Request a copy of the personal information we hold about you.

✏️ Correction

Ask us to correct inaccurate or incomplete information.

🗑️ Deletion

Request deletion of your personal data, subject to legal retention requirements.

📦 Portability

Receive your data in a structured, machine-readable format.

🚫 Opt-Out

Opt out of marketing communications at any time via unsubscribe link or email.

🔌 Revoke Access

Disconnect bank accounts and revoke Plaid access at any time in Settings.

California residents have additional rights under the CCPA/CPRA, including the right to know, delete, and opt out of sale of personal information. We do not sell personal information. To submit a verifiable consumer request, email support@withsavvy.ai.

10

Children's Privacy

Savvy is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at support@withsavvy.ai and we will delete it promptly.

11

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (sent to the address associated with your account) and update the "Last updated" date at the top of this page at least 30 days before the changes take effect.

And the standing commitment from the top of this page applies here too: how we use your data changes on this page before it changes in the product.

Your continued use of Savvy after any changes constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you may close your account.

12

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

  • Email: support@withsavvy.ai
  • Security issues: security@withsavvy.ai

We will respond to all privacy-related requests within 5 business days.