This policy explains what Tavera Money collects, why, who we share it with, and what control you have. It applies to the website at taveramoney.com and to the Tavera Money application at app.taveramoney.com.
1. Who we are
Tavera Money is a personal budgeting service. For the purposes of data protection law we are the controller of the personal information described in this policy. You can reach us at [email protected].
2. Information we collect
Information you give us
- Account details — your name, email address and a hashed password. We never store your password in a readable form.
- Financial information you enter — accounts, balances, transactions, merchants, categories, budgets, goals, debts and recurring bills.
- Household membership — if you invite someone to your household or accept an invitation, we record that relationship. Everyone in a household can see the household's financial data.
- Preferences — currency, timezone, theme and your notification choices.
Information from your bank, if you choose to connect one
Bank connections are optional and are not available on the free plan. If you connect a bank, we use Plaid Inc. to make that connection. You enter your banking credentials with Plaid, not with us — Tavera Money never receives, sees or stores your bank username or password. Plaid gives us an access token, which we store encrypted, and we use it to retrieve:
- account names, types, masks and balances;
- transactions, including date, amount, merchant and the bank's own category;
- the name of the institution.
This access is read-only. Tavera Money cannot initiate a payment, a transfer or any other movement of money. Plaid's handling of your information is governed by its own privacy policy.
Payment information
If you subscribe to a paid plan, payment is processed by Stripe, Inc. Your card number is submitted directly to Stripe and never reaches our servers. We store only a subscription reference, the card brand and the last four digits, so that you can tell which card is on file.
Information collected automatically
- Server logs — IP address, browser type and the pages requested, kept for security and troubleshooting.
- Essential cookies — a session cookie so you stay logged in, and a CSRF token. These cannot be turned off without breaking the service.
- Analytics on this marketing website only — if you accept the cookie banner at taveramoney.com, Google Analytics records which pages you visit. It is set to deny consent by default, so nothing is recorded unless you accept. There is no third-party analytics in the Tavera Money application itself.
3. How we use your information
- To provide the service — budgets, categorisation, reports and recaps.
- To authenticate you and keep your account secure.
- To send transactional email: email verification, password resets, bill reminders and the notification digests you have opted into.
- To take payment and manage your subscription.
- To improve the product — understanding which features are used, in aggregate.
- To comply with legal obligations and to prevent fraud and abuse.
We do not use your financial data to build advertising profiles, and we do not use it to make automated decisions that produce legal effects for you.
4. We do not sell your personal information
Tavera Money does not sell, rent, or share your personal information with third parties for their own purposes, and does not share it for cross-context behavioural advertising.We have not done so in the past and we do not intend to. We are funded by subscription revenue. If this ever changed, we would tell you before it happened, and it would require your explicit consent.
5. Who we share information with
We share information only with the service providers needed to run Simple Budget, and only to the extent needed. Each is bound by contract to protect it and to use it only on our instructions.
| Provider | Purpose | When |
|---|---|---|
| Plaid | Bank connection, transactions and balances | Only if you link a bank |
| Stripe | Subscription payments | Only if you subscribe |
| Our hosting and database provider | Running the service and storing your data | Always |
| Our email provider | Sending account and reminder email | Always |
| Google Analytics | Traffic measurement on the marketing website | Only if you accept the cookie banner |
We may also disclose information if required by law, or in connection with a merger or acquisition — in which case we would give you notice and this policy would continue to apply until you were told otherwise.
6. Where your data is held
Your data is stored on managed servers in the United States. It is encrypted in transit using HTTPS and encrypted at rest. Plaid access tokens receive an additional layer of application-level encryption. Access by our team is limited to what is needed to operate and support the service.
7. How long we keep it
We keep your information for as long as your account is open. If you ask us to delete your account, we delete your personal information and financial records within 30 days, except where we are required to retain something — for example, payment records we must keep for tax and accounting purposes. Backups are rotated and are fully overwritten within 90 days.
8. Your choices and rights
- Access and export — export all of your transactions and your full balance history as CSV files from Settings → Data, on any plan.
- Correction — edit or delete any account, transaction, budget, goal or debt at any time in the app.
- Deletion — delete transactions and balance history yourself from Settings → Data. To delete your account entirely, email [email protected] and we will action it.
- Disconnecting a bank — unlink at any time, and choose whether to keep the imported data as manual records or delete it.
- Email preferences — turn off any non-essential notification by type and channel in Settings → Notifications. We will still send essential account email such as password resets.
- Analytics — decline the cookie banner, or clear your choice by clearing this site's local storage.
Depending on where you live you may have additional rights — including access, portability, correction, erasure, restriction, objection, and the right not to be discriminated against for exercising them. Email us and we will honour them. You also have the right to complain to your local data protection authority.
9. Children
Tavera Money is not intended for anyone under 16, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
10. Changes to this policy
If we make a material change we will update the date at the top of this page and notify account holders by email before it takes effect. Continuing to use Tavera Money after a change means you accept the updated policy.
11. Contact
Privacy questions and requests: [email protected]. Everything else: [email protected].