Introduction
Welcome to Jubblee ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal and financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial management application and services.
Information We Collect
Information You Provide Directly
- Account Information: Name, email address, and authentication credentials
- Financial Data: Budget settings, debt information, bill details, and asset information that you manually enter
- Profile Information: User preferences and settings
Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on the application
- Device Information: Browser type, operating system, IP address
- Cookies and Similar Technologies: Session identifiers and preference cookies
Information from Third-Party Services
When you connect your bank accounts through Plaid, we receive:
- Account Information: Account numbers, balances, and account holder names
- Transaction Data: Transaction history, amounts, dates, and merchant information
- Identity Information: Name, address, phone number, and email associated with your financial accounts
How We Use Your Information
We use the collected information to:
- Provide Services: Calculate daily budgets, project debt payoff timelines, detect recurring bills, and analyze warranty costs
- Improve User Experience: Personalize features, remember preferences, and optimize application performance
- Security and Fraud Prevention: Detect and prevent unauthorized access, fraudulent transactions, and security threats
- Communication: Send service updates, security alerts, and respond to support requests
- Compliance: Meet legal obligations and enforce our Terms of Service
Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption
- Access Controls: Role-based access control (RBAC) and multi-factor authentication (MFA) for administrative access
- Regular Audits: Periodic security assessments and vulnerability scans
- Secure Infrastructure: Hosted on secure, compliant cloud infrastructure
- Data Minimization: We collect only the information necessary to provide our services
Your Rights and Choices
You have the following rights regarding your personal information:
- Access and Portability: Request a copy of your personal data in a machine-readable format
- Correction: Update or correct inaccurate information through your account settings
- Deletion: Request deletion of your account and associated data (deleted within 30 days)
- Opt-Out: Disconnect linked bank accounts at any time
To exercise these rights, contact us at [email protected].
Data Retention
- Account Data: Retained while your account is active, deleted within 30 days of account closure
- Transaction Data: Retained for 7 years to comply with financial regulations
- Usage Logs: Retained for 90 days for security and troubleshooting purposes
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:
Compliance
This Privacy Policy complies with:
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
- Gramm-Leach-Bliley Act (GLBA)
- Plaid Security Requirements