Privacy Policy — Handled

Who we are

Handled Finance, Inc. (“Handled,” “we,” “our,” or “us”) operates handledfinance.app. We help people start investing automatically through a target date fund connected to their bank account. This Privacy Policy explains what information we collect, how we use it, and your rights.

What we collect

Information you give us

Account information: your email address when you create an account or join the waitlist.
Financial goals: your target retirement year and monthly investment amount, which you enter directly into the app.
Funding schedule: your preferred recurring deposit cadence (e.g., every two weeks) that you select during onboarding.

Financial data collected via Plaid

When you connect your bank account, we use Plaid Technologies, Inc.(“Plaid”) to access your financial data. Plaid is a financial data platform used by Venmo, Robinhood, Coinbase, and thousands of other apps. Your bank login credentials go directly to your bank via Plaid — we never see your username or password.

Through Plaid, we may access:

Bank account numbers and routing numbers (to set up recurring transfers)
Account balances
Transaction history (to categorize your spending and show your spending analysis)
Account holder name

By connecting your bank, you agree to Plaid's End User Privacy Policy. Plaid's policy governs how Plaid handles your data independently of Handled.

Brokerage data via Alpaca

When you open an investment account, we use Alpaca Securities LLC(“Alpaca”), a FINRA-member broker-dealer, to open and manage your brokerage account. To open an account, Alpaca requires identity verification information including your full name, date of birth, Social Security number, and address. This information is submitted directly to Alpaca and is governed by Alpaca's disclosures and privacy policy. Handled does not store your SSN or government ID.

Information collected automatically

Usage data: pages visited, time spent, browser type, and device type, collected via Vercel Analytics.
IP address: collected by our hosting provider (Vercel) for security. Not linked to your identity.
Cookies: session cookies to keep you signed in. We do not use advertising or third-party tracking cookies.

How we use your information

To connect your bank account and set up recurring investment transfers via Plaid.
To place investment orders in your brokerage account via Alpaca.
To show you your spending analysis and categorized transactions.
To send you monthly summaries and account notifications.
To contact you when your account is ready or when action is required.
To improve our product based on how people use it.
To comply with legal and regulatory obligations.

We do not sell your personal information or financial data. We do not share it with third parties for their marketing purposes.

How we store and protect your data

Your account data is stored in Google Firebase Firestore, hosted on Google Cloud in the United States. Bank access tokens (issued by Plaid after you connect your bank) are stored encrypted in our database and never exposed in the browser or to third parties outside Plaid and Alpaca.

We use HTTPS for all data in transit. We do not store your bank login credentials, your SSN, or your bank account password at any point.

Data sharing

We share your data only in the following circumstances:

Plaid — to connect your bank account and retrieve transaction and account data. Plaid's End User Privacy Policy
Alpaca Securities LLC — to open and operate your brokerage account and place investment orders. Alpaca's Disclosures
Google Firebase — database, authentication, and analytics infrastructure. Firebase Privacy Policy
Vercel — website hosting and deployment. Vercel Privacy Policy
Legal requirements — if required by law, regulation, court order, or to protect the rights and safety of Handled or our users.

Data retention

We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g., for tax or regulatory purposes). Bank access tokens are revoked via Plaid when you disconnect your bank.

Your rights and data deletion

You have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data and closure of your account.
Disconnect your bank account at any time (this revokes Plaid access).
Opt out of marketing communications at any time.

To exercise any of these rights, email privacy@handledfinance.app. We will respond within 30 days. To close your brokerage account, you must also contact Alpaca directly.

California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of your personal information. We do not sell personal information. To make a CCPA request, contact privacy@handledfinance.app.

Children's privacy

Handled is not directed at anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it promptly.

Changes to this policy

We may update this policy as our product evolves. We will post the updated policy here with a new “Last updated” date. For material changes, we will notify you by email.

Contact

Questions about this policy? Email privacy@handledfinance.app.