Privacy Policy
Last updated: May 31, 2026
🔒 Bank-level encryption
👁 Read-only access
🛡 We never move your money
SaveFlow AI ("SaveFlow," "we," "us," or "our") is operated by RevenArc LLC, a California limited liability company. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our application and services.
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Password (encrypted, never stored in plain text)
- Name (optional)
Financial Data (via Plaid)
When you connect a bank account through our integration partner Plaid Inc., we receive:
- Transaction history (amounts, dates, merchant names)
- Account balances
- Account and routing numbers (for account verification only)
Important: We access your financial data in read-only mode. We cannot initiate transactions, move funds, or make changes to your bank accounts.
Financial Data (via File Upload)
If you upload transaction files (CSV, OFX, QFX, QIF), we process the transaction data contained in those files (dates, descriptions, amounts).
Usage Data
We automatically collect basic usage information such as device type, operating system, app version, and interaction patterns to improve our service.
2. How We Use Your Information
We use your information exclusively to:
- Detect recurring subscriptions and charges
- Identify unused, duplicate, or overpriced subscriptions
- Generate money-saving insights and recommendations
- Alert you to upcoming trial conversions, renewals, and price hikes
- Detect potential refund opportunities
- Provide your Safe-to-Spend balance forecast
- Communicate with you about your account and our service
We do not:
- Sell your personal or financial data to third parties
- Share your data with advertisers
- Use your data for credit decisions or scoring
- Share individual-level data with any party other than our infrastructure providers
3. Data Storage and Security
Your data is protected by enterprise-grade security measures:
- Encryption in transit: All data is transmitted over TLS 1.2+ (HTTPS)
- Encryption at rest: All stored data is encrypted using AES-256 via AWS-managed keys
- Infrastructure: Hosted on Amazon Web Services (AWS) with SOC 2 Type II compliance
- Access control: Role-based access with least-privilege IAM policies
- Secrets management: API keys and tokens stored in AWS Secrets Manager with KMS encryption
- Authentication: User accounts protected by AWS Cognito with email verification
4. Third-Party Services
We use the following third-party services to operate SaveFlow:
- Plaid Inc. for bank account connections. Plaid's use of your data is governed by Plaid's End User Privacy Policy.
- Amazon Web Services (AWS) for infrastructure, compute, storage, and authentication.
- Amazon Bedrock (Claude AI) for generating savings insights. Financial data sent to AI models is not used for model training and is processed transiently.
5. Data Retention and Deletion
We retain your data only while your account is active and as needed to provide you our services.
- You may request deletion of your account and all associated data at any time by emailing privacy@usesaveflow.com.
- Upon account deletion, all your personal data, transaction history, detected subscriptions, and insights are permanently purged from our systems within 30 days.
- Plaid access tokens are revoked immediately upon account deletion.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Data portability (receive your data in a machine-readable format)
- Withdraw consent at any time
To exercise any of these rights, contact us at privacy@usesaveflow.com.
7. Consent
By creating an account and connecting your financial accounts, you consent to the collection, processing, and storage of your data as described in this policy. You may withdraw consent at any time by disconnecting your accounts or deleting your SaveFlow account.
8. Children's Privacy
SaveFlow is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of SaveFlow after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices: