Privacy Policy

This Privacy Policy explains how Capalty LLC, doing business as MonthlyIQ (“MonthlyIQ,” “we,” “us,” or “our”) collects, uses, shares and protects information when you use the MonthlyIQ website, applications and services (the “Service”).

Our core commitments: we do not sell your personal information, we do not use your financial data for targeted advertising, and you can disconnect accounts and delete your data at any time.

MonthlyIQ is a product and trade name operated by Capalty LLC, a Florida limited liability company. MonthlyIQ is a personal financial management and financial intelligence service. We are not a bank, lender, broker-dealer or investment adviser.

This policy applies to information we process when you visit our website, create an account, connect financial accounts, or contact us. It does not apply to third-party websites or services, including your financial institutions and Plaid, which have their own privacy policies.

We collect the following categories of information:

• Identifiers: name, email address, account ID.
• Account information: login method, household membership, plan and subscription status.
• Financial information: connected account names, types, masked account numbers, balances, credit limits, and transaction history (date, amount, merchant, category, pending status).
• Information you provide: corrections, categorizations, bill confirmations, notes, questions you ask the assistant, and support messages.
• Device and usage information: browser type, device type, pages viewed, approximate time of access, and security logs.
• Inferences: calculated recurring expenses, spending patterns and insights derived from your data.

Financial information is collected only from accounts you choose to connect and is used only to provide the MonthlyIQ features you use: analyzing transactions, identifying recurring obligations, calculating spending and cash flow, and generating insights. We never receive or store your online banking username or password. MonthlyIQ does not initiate payments or move money.

We use Plaid Inc. (“Plaid”) to connect to your financial institutions. When you connect an account, you provide your credentials directly to Plaid or your institution, not to MonthlyIQ. Plaid then provides us with account and transaction information you authorized.

By connecting an account, you acknowledge that Plaid’s collection and use of your information is governed by the Plaid End User Privacy Policy, available at https://plaid.com/legal/#end-user-privacy-policy.

Access tokens issued by Plaid are encrypted and stored only on our servers; they are never sent to your browser.

When you create an account, update your profile, submit a privacy request, contact support, or ask the in-app assistant a question, we collect the information you provide.

We collect limited technical information needed to operate and secure the Service, such as authentication session data and error logs. We do not use session-replay tools on financial screens, and we do not send your financial data to advertising or analytics networks.

We may receive information from service providers that help us operate the Service, such as authentication, email delivery and (in the future) payment processing providers.

• Provide, maintain and improve the Service and its features.
• Connect and synchronize your financial accounts.
• Calculate expenses, recurring bills, cash flow and insights.
• Authenticate you and secure accounts, including fraud and abuse prevention.
• Send service communications such as security alerts, sign-in links and account notices.
• Send marketing emails only if you opted in; you can opt out at any time.
• Respond to support and privacy requests.
• Comply with law and enforce our Terms.

We do not sell personal information and do not share it for cross-context behavioral advertising. We share information only:

• With service providers acting on our behalf under contractual confidentiality and data-protection obligations (see our Subprocessors page).
• With members of your household you invite, according to their household role.
• When required by law, subpoena or legal process, or to protect the rights, safety and property of users, MonthlyIQ or others.
• In connection with a merger, acquisition, financing or sale of assets, subject to this policy’s protections.
• With your direction or consent.

Our current service providers include Plaid (account connectivity), our cloud hosting and database provider, our AI model provider (for the optional assistant), and our email delivery provider. A payment processor will be added when paid plans launch. A current list is maintained on our Subprocessors page.

MonthlyIQ uses automated rules and, for the optional assistant, AI language models to analyze your transactions and answer questions. Only the minimum household financial context needed to answer your question is sent to the AI provider, and it is not used by us to train models. Automated results are estimates, may be wrong, and do not produce legal or similarly significant decisions about you. You can correct classifications at any time, and your corrections take priority.

We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete your profile, household and connected financial data from our active systems. We may retain limited records where required by law, to resolve disputes, to enforce agreements, or for security (for example, records of legal acceptances and audit logs). Backups are overwritten on our providers’ standard cycles.

We use administrative, technical and physical safeguards designed to protect your information, including encryption in transit, encrypted storage of connection tokens, and database-level access controls that isolate each household. No system is completely secure, and we cannot guarantee absolute security.

We use only strictly necessary storage (such as authentication sessions and security preferences). We do not currently use advertising cookies. See our Cookie Policy for details.

• Access and update your profile in Settings.
• Disconnect any financial institution from Accounts.
• Opt out of marketing emails in Settings or via the unsubscribe link.
• Request access, correction, export or deletion through our Privacy Request form.
• Delete your account and data from Settings.

Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others), you may have rights to know, access, correct, delete and obtain a copy of your personal information, to opt out of sale, targeted advertising and certain profiling, and to appeal our decision on a request. We honor these requests regardless of your state, subject to verification and legal exceptions. We will not discriminate against you for exercising these rights.

In the preceding 12 months we collected the categories listed in “Information we collect” for the business purposes described in “How we use information.” We have not sold or shared (for cross-context behavioral advertising) personal information, and we do not knowingly sell or share information of consumers under 16. Financial information we collect may be sensitive personal information; we use it only as permitted to provide the Service. Certain financial information may be subject to the Gramm-Leach-Bliley Act rather than the CCPA. You may use an authorized agent to submit requests, subject to verification.

The Service is intended only for adults 18 and older. We do not knowingly collect personal information from children under 13 (or under 18 for account creation). If you believe a child has provided us information, contact us and we will delete it.

The Service is designed for users in the United States and information is processed in the United States. If you use the Service from outside the United States, you do so at your own initiative.

We may update this policy. We will post the updated version with a new effective date and version number. For material changes, we will notify you and, where required, ask you to review and accept the updated policy before continuing to use the Service.

Capalty LLC, doing business as MonthlyIQ (“MonthlyIQ,” “we,” “us,” or “our”).

• Privacy: privacy@monthlyiq.com
• Support: support@monthlyiq.com
• Security: security@monthlyiq.com
• Mail: 500 S. Australian Ave., Ste 600 #1072, West Palm Beach, FL 33480