Vendors & Subprocessors

• Purpose: financial account connectivity and authorized financial data retrieval.
• Data: account and institution information, balances, transactions, recurring transactions and identity information, depending on enabled products.
• Consumer financial data: yes. Location: United States.
• Review: security and privacy review before production and periodically thereafter; Plaid agreements maintained.

• Purpose: application backend, authentication, encrypted database, server functions and hosting.
• Data: account data, application data and financial data stored by MonthlyIQ.
• Consumer financial data: yes. Location: United States.
• Configuration review: row-level security, secrets, authentication, administrator MFA, backups, logs and access controls.

• Purpose: development tooling, builds and deployment.
• Data: production secrets and unnecessary consumer financial data are not exposed to development tooling.

• AI model provider — answers to questions you ask the optional in-app assistant; household-scoped context only; not used for advertising (United States).
• Email delivery provider — sign-in links and service emails (United States).
• Google — optional sign-in with Google.
• Domain and DNS provider — domain administration; no consumer financial data.

• Stripe, Inc. — subscription payment processing, once paid plans launch.

For every vendor we document service purpose, data categories, whether consumer financial data is processed, whether production access exists, processing locations, security documentation and privacy terms reviewed, contract owner, approval and review dates, and termination/data-deletion procedure. No new vendor may receive consumer financial information or production access without a documented business purpose and appropriate security and privacy review.

These providers process information only on our instructions to provide the Service, under confidentiality and data-protection obligations. They are not permitted to sell your information or use it for their own advertising.

We update this page when we add or change subprocessors.

Capalty LLC, doing business as MonthlyIQ (“MonthlyIQ,” “we,” “us,” or “our”).

• Privacy: privacy@monthlyiq.com
• Support: support@monthlyiq.com
• Security: security@monthlyiq.com
• Mail: 500 S. Australian Ave., Ste 600 #1072, West Palm Beach, FL 33480