Privacy Policy

Paiso helps you see all of your money in one place: accounts, spending, and investments, and, on plans that include them, taxes and long-range plans. To do that, you trust us with some of the most personal information you have. This policy explains, in plain language, what we collect, why we collect it, who helps us process it, and what you can do about it.

The short version

• We use your information to run Paiso for you. That is the business.
• We do not sell your personal information, and we do not use it for advertising.
• We do not send your financial data to AI or large-language-model services.
• Connecting your finances is optional, and when you do, we never see your bank username or password.
• You can permanently delete your account yourself, at any time, from Settings, and you can ask us for a copy of your data whenever you want one.

1. Who we are and what this policy covers

“Paiso,” “we,” “us,” and “our” refer to Artificial Systems LLC, a Texas limited liability company, doing business as Paiso. This policy applies to our website at paisoapp.com, the Paiso application at app.paisoapp.com, and any related services, emails, or support interactions (together, the “Service”).

This policy does not cover third-party websites or services that we link to or that you choose to connect, such as your bank, Plaid, Stripe, or a sign-in provider. Those services have their own privacy policies.

2. Information we collect

Account information

When you create an account we collect your email address and a password. We never store your password itself, only a one-way cryptographic hash of it. During setup we ask for your first and last name and your date of birth, which is needed to finish setting up your account because retirement and planning features are calculated from your age. You can optionally add a phone number and profile photo.

If you turn on two-factor authentication, we store the secret that links your authenticator app (encrypted) and one-way hashes of your recovery codes.

Sign-in with Google, Apple, or LinkedIn

If you choose to sign in with a third-party provider, that provider shares with us a unique identifier for your account there, your email address, and, where available, your name and profile picture. We request only basic profile and email permissions, which the provider shows you when you sign in. We do not receive your password for that provider.

Household and family information

Paiso lets you add people in your household, such as a spouse, children, parents, or other dependents, so your plans reflect your real life. For each person you may enter a name, relationship, date of birth, gender, photo, and planning assumptions such as retirement age, life expectancy, estimated Social Security benefits, and tax filing status. You can also link a 529 plan to a beneficiary.

Please add information about other people only if you have the right to do so. Household members do not get their own Paiso login, and we use their information only to provide the Service to you.

Financial information you enter or import

Depending on which features you use, this may include:

• Accounts and transactions: account names and types, balances, credit limits, transactions, merchants, categories, tags, notes, and receipts or other files you attach.
• Investments: holdings, trades and cost basis, dividends, stock option grants, and details of retirement, health savings, and education savings accounts.
• Assets and loans: property, vehicles, and other assets, including details, values, photos, and links you provide (for example a Zillow listing), as well as loan balances, interest rates, insurance, and property tax.
• Taxes: filing status, number of dependents, state, wages and other income, retirement and HSA contributions, deductions, withholding, and estimated payments.
• Retirement and life planning: retirement ages, income and expense assumptions, Social Security estimates, goals, and life events. Some life events, such as divorce or support payments, may be sensitive. You choose whether to add them.
• Budgets and dashboard settings: budget amounts, allocations, and how you arrange your dashboard.
• Imported files: the contents of any transaction or account file you upload from another financial institution or application.

We do not ask for, and you should not enter, your Social Security number or other government ID number.

Linked financial accounts (through Plaid)

Linking an account is optional. If you choose to connect a bank, card, loan, or investment account, our partner Plaid Inc. (“Plaid”) provides the connection. With your authorization, Plaid shares information from the accounts you select, which may include:

• institution name, account name, account type, and the last few digits of the account number;
• current and available balances;
• transactions, including merchant and category details;
• investment holdings and investment transactions;
• liability details such as interest rates, statement balances, payment due dates, and, for mortgages, the property address; and
• recurring transaction patterns.

Plaid also gives us an access token that lets Paiso request updates for that connection. We encrypt it before storing it. We never receive or store the username, password, or security answers you use at your financial institution. See Plaid and linked accounts for more.

Subscription and billing information

Paid plans are processed by Stripe, Inc. (“Stripe”). You enter your payment details into Stripe’s secure payment form. We do not receive or store your full card number or security code. We receive and keep your Stripe customer and subscription identifiers, the plan and billing interval you chose, your subscription status, and renewal or cancellation dates.

When you take a promotional offer, such as a free period, we record that the offer was used. To detect and prevent fraud and abuse of these offers, the record includes two values that identify repeat use without revealing what they were made from:

• A one-way hash of your email address. We reduce the address to a fixed string of characters with a secret key that never leaves our servers. The same address always gives the same string, so we can tell when an offer has been used before. The string cannot be turned back into an email address, by us or by anyone else.
• A card identifier from Stripe. Stripe assigns each payment card an identifier that is the same wherever that card is used on Paiso. It is not the card number and cannot be turned back into one.

Technical information

Like most online services, our servers see your IP address and basic browser information when you use Paiso. We use your IP address as the request happens to protect sign-in and sign-up from abuse (for example, rate limiting and bot checks). We do not store it in your account records. We also use cookies and your browser’s local storage to keep you signed in and to remember your preferences. See section 9.

Performance measurements

To make Paiso faster, we measure how quickly its pages load, using Cloudflare Web Analytics. When a page loads, a small script from Cloudflare reports how long the page took to load and render, the page address, the referring page, your browser and device type, and your approximate country. It sets no cookies, does not track you across other websites, and does not record what you type or the financial data on the page. We use these measurements only to find slow pages and other bottlenecks and to improve Paiso. We do not use them for advertising and we do not sell them.

Communications

If you email us or ask for support, we keep that correspondence and any information you choose to include.

Please do not send us sensitive information. We will never ask for your Paiso password, your bank or brokerage login, a one-time passcode, or a full account or card number. We will not ask by email, by phone, or through support. If someone claiming to be from Paiso asks you for any of these, it is not us; forward the message to [email protected].

3. Where your information comes from

• From you, when you create an account, enter information, upload files, or contact us.
• From Plaid and your financial institutions, for accounts you choose to link.
• From Stripe, about your subscription and payment status.
• From sign-in providers (Google, Apple, LinkedIn) if you use them.
• Automatically, from your browser or device when you use the Service.

4. How we use your information

We use your information to:

• provide the Service. Depending on your plan, that means: show your accounts, categorize transactions, track investments and 529 plans, build budgets, estimate taxes, and run retirement and life-plan projections;
• keep linked accounts up to date and match imported transactions to merchants and categories;
• create and secure your account, including sign-in, two-factor authentication, email verification, and preventing fraud and abuse;
• process subscriptions, trials, and promotions, and manage your plan;
• send you service messages, such as sign-up verification codes, password-reset links, and important notices about your account or these policies;
• respond to your questions and support requests;
• keep the Service working, secure, and reliable, and diagnose problems;
• measure how quickly pages load and find bottlenecks, so we can make Paiso faster; and
• comply with law, enforce our Terms of Service, and protect the rights and safety of our users and of Paiso.

What we do not do. We do not sell your personal information. We do not use it, or share it with anyone, for targeted or cross-context behavioral advertising. We do not send your financial data to artificial-intelligence or large-language-model providers. We do not send marketing emails today. If we ever do, we will only send them in line with applicable law, and every message will include a way to unsubscribe.

5. How we share information

We share information only as described here.

Service providers

We use a small number of companies to operate Paiso. They may process your information only to provide their services to us or to you.

Public market and reference data

To show prices, logos, and valuations, we look up publicly available reference data from third-party data providers: market and fund prices, company and institution logos, property listing images, and general descriptions. These lookups send only what is needed to find the public information, such as a ticker symbol, a company name or website, or a link you provided. They never include your name, email address, balances, or other account details.

Other situations

• At your direction. When you ask us to share information or connect a third-party service.
• Legal and safety. When we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is necessary to protect the rights, property, or safety of Paiso, our users, or others, or to investigate fraud or security issues.
• Business transfers. If Paiso is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. The recipient will remain bound by the commitments in this policy for information collected under it, and we will notify you before your information becomes subject to a different privacy policy.

6. No sale of personal information, no targeted advertising

We do not sell personal information, and we do not “share” it for cross-context behavioral advertising, as those terms are defined under California and other U.S. state privacy laws. We have not done so in the past 12 months. Because we do not sell or share, there is nothing to opt out of, but you are welcome to contact us with any questions.

7. Plaid and linked accounts

Linking accounts is entirely optional. You can use Paiso by entering or importing your information yourself.

When you link an account, Plaid handles the sign-in with your financial institution, and you authorize Plaid to share the account information described in section 2 with Paiso. Plaid’s handling of your information is governed by the Plaid End User Privacy Policy.

Paiso uses Plaid only to read account information. We do not use Plaid, or any other service, to move money, make payments, or initiate transfers from your accounts.

You can disconnect a linked institution at any time in Paiso. When you disconnect an institution, or delete your account, we ask Plaid to revoke our access to that connection. If Plaid cannot be reached right away, we keep retrying automatically until the revocation succeeds.

8. Stripe and payments

Stripe processes all payments for paid plans. Stripe’s use of your information is governed by the Stripe Privacy Policy. You can view invoices, update your payment method, or cancel your subscription in Settings → Billing.

9. Cookies and similar technologies

Paiso uses only the cookies and browser storage needed to run the Service:

• Sign-in cookie. A secure, HTTP-only cookie that keeps you signed in on a device for up to 30 days.
• Sign-in-provider cookie. A short-lived cookie that protects the sign-in handoff when you use Google, Apple, or LinkedIn.
• Local storage. Your browser stores your current session and interface preferences, such as theme, layout, and date ranges, so the app works the way you left it.

We do not use advertising cookies or session-replay tools. To measure page performance we use Cloudflare Web Analytics, which sets no cookies and does not track you across websites (see “Performance measurements” in section 2). Services embedded in the app to perform specific functions (Stripe’s payment form, Plaid’s connection window, and Cloudflare’s bot check) may set their own cookies, governed by their own policies. You can clear cookies and local storage in your browser at any time. If you do, you will be signed out and your preferences will reset.

10. How long we keep information

We keep your information for as long as you have an account, so the Service can show your history and plans.

When you delete your account in Settings, we delete your profile, household members, accounts, transactions, attachments, investments, plans, and other content from our production systems. We also ask Plaid to revoke access to any linked institutions, and we cancel any paid subscription at Stripe. Deletion is permanent and we cannot restore a deleted account. Some information remains for a limited time after deletion:

• Security and administrative records. A log of administrative actions taken on accounts may keep the email address associated with the action, to protect the integrity of the Service.
• Email delivery records. If an email to your address bounced or was marked as spam, we keep that address on a suppression list so we do not keep sending mail to it.
• Billing records. Stripe keeps transaction records as required for tax, accounting, and legal purposes.
• Promotion records. If your account took a promotional offer, we keep the record that it was used, so that an offer meant for new customers is used once per person. The record holds the email address that was on the account, the one-way hash of that address, and the card identifier from Stripe, as described in section 2. We use it only to detect and prevent fraud and abuse of promotional offers.
• Pending disconnections and cancellations. Until Plaid confirms a connection is revoked, we keep the encrypted token needed to finish the revocation, with no link to your account. Likewise, if a subscription cannot be cancelled at Stripe right away, we keep the Stripe identifiers and your email address until it is.
• Operational copies. Server logs and system copies made in the ordinary course of running the Service may retain some information for a short period before they age out.

Public market data, such as stock prices, is not personal information and is not affected by account deletion.

You can also reset your data without deleting your account, which removes your financial content and disconnects linked accounts but keeps your login and your preferences.

11. How we protect information

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, encrypted storage, an additional layer of application-level encryption for the most sensitive credentials, strong password hashing, optional two-factor authentication, and strict access controls. Read more on our Trust & Security page.

No method of transmitting or storing data is completely secure, so we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you as required by applicable law.

12. Your choices and rights

Everyone who uses Paiso can:

• Access and get a copy of their data. Email us and we will send you a copy of the information we hold about you, in a portable format, within the time the law allows.
• Correct their data. Edit your profile and financial information directly in the app.
• Delete their data. Delete your account, or reset your data, from Settings. You can also delete individual items at any time.
• Disconnect linked accounts at any time.
• Contact us at [email protected] with any privacy request or question.

U.S. state privacy rights

Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws), you may have the right to:

• know what personal information we collect, use, and disclose, and to receive a copy of it in a portable format;
• correct inaccurate personal information;
• delete personal information;
• opt out of the sale of personal information, targeted advertising, and certain profiling (we do not do any of these); and
• limit the use of sensitive personal information (we use it only to provide the Service you requested).

To make a request, delete your account or reset your data yourself in Settings, or email [email protected]. We will verify your identity, typically by confirming control of the email address on your account, before completing a request. You may use an authorized agent where the law allows, and we may ask for proof of the agent’s authority. If we deny your request, you may appeal by replying to our decision. We will respond to appeals within the time the law requires. We will not discriminate against you for exercising any of these rights.

California “Shine the Light.” We do not disclose personal information to third parties for their own direct marketing purposes.

13. Children’s privacy

Paiso is intended for adults. You must be at least 18 years old to create an account, and we do not knowingly collect personal information directly from anyone under 18. Account holders may enter limited information about their children or other dependents for planning purposes, such as a name or other label that lets the account holder tell household members apart, and a date of birth, as described in section 2. That information is controlled by the account holder and can be edited or deleted at any time. If you believe a minor has created an account, contact [email protected] and we will delete it.

14. Where information is processed

Paiso is operated from the United States, and your information is stored and processed in Texas, United States. Some of our service providers may process information in other countries under their own safeguards. The Service is intended for users in the United States.

15. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect, and we will update the “Last updated” date above. Your continued use of Paiso after an update means the updated policy applies.

16. Contact us

Questions or requests about this policy or your information:

Artificial Systems LLC (d/b/a Paiso) Email: [email protected]