PanchoMoney

Privacy Policy

Last updated: June 25, 2026

Your privacy matters to us. Here's how we handle your data—no legal jargon olympics, we promise.

1. The Short Version

We take your privacy seriously. We collect only what we need to run PanchoMoney, we don't sell your data, and we use industry-standard security to protect it. Read on for the details.

2. What We Collect

Things You Give Us

  • Account: Name, email, and password when you create an account.
  • Financial Data: Statements you upload or accounts you connect. This is the core of what we do—helping you understand your finances. When you link a bank or brokerage, we use Plaid to securely connect to your financial institution; Plaid handles your institution credentials and shares account and transaction data with us. See Plaid's end-user privacy policy.
  • Payment Information: When you subscribe to a paid plan, our payment processor (Stripe) collects your payment details. We do not store your full card number, CVC, or expiration date.

Things We Collect Automatically

  • Usage Data: How you use PanchoMoney (pages visited, features used). Helps us improve.
  • Device Info: Browser type, operating system. Standard web stuff.
  • IP Address: For security and keeping bad actors out.

3. How We Use Your Data

We use your information to:

  • Make PanchoMoney work (the obvious one)
  • Send you relevant updates (not spam, we promise)
  • Help you when you need support
  • Make the product better based on how people use it
  • Keep your account secure
  • Power AI features: When you use our AI assistant or AI-generated insights, we send the relevant financial data (such as transactions and holdings) to our AI provider, Anthropic, to generate a response. Anthropic processes this data on our behalf and does not use it to train its models. We are not financial advisors and AI output is for informational purposes only.
  • Follow the law when required

4. Who We Share With

We do not sell your personal information. Ever. We only share information when:

  • Service Providers (subprocessors): Companies that help us run Pancho Money. Each is contractually bound to protect your data and only use it to provide services to us:
    • Amazon Web Services (AWS) — hosting and encrypted data storage
    • Vercel — hosting for our marketing site
    • Stripe — payment processing
    • Plaid — secure bank/brokerage account linking
    • Anthropic — AI processing for the assistant and insights (does not train on your data)
    • PostHog and Sentry — product analytics and error monitoring
  • Legal Stuff: If a court order requires it or to protect our rights.
  • Business Changes: If we're acquired, your data goes with the business (with protections).

5. Households & Shared Access

PanchoMoney lets you create a household to see finances across members in one place. If you join or are added to a household, the accounts you choose to share become visible to other members of that household (for example, a combined net worth or spending view). You control which of your accounts are shared, and you can stop sharing or leave a household at any time—doing so detaches the shared view without deleting your underlying data. Only share with people you trust.

6. How We Protect Your Data

We take security seriously. Your financial data is sensitive, so we:

  • Encrypt everything in transit (TLS) and at rest (AES-256)
  • Regularly test our security
  • Limit who can access what (principle of least privilege)
  • Use secure, modern infrastructure with regular security updates

7. How Long We Keep Your Data

We keep your data for as long as your account is active. If you delete your account, we'll delete your personal data within 30 days, except where we need to keep it longer for:

  • Legal compliance (tax records, financial regulations)
  • Fraud prevention
  • Resolving disputes

Aggregated, anonymized data that can't identify you may be retained indefinitely to improve our services.

8. Your Rights

You're in control. You can:

  • See what data we have about you
  • Fix anything that's wrong
  • Delete your account and data
  • Unsubscribe from emails
  • Export your data to take with you

Just email us at privacy@panchomoney.com and we'll help within 30 days.

9. For California Residents

Under the California Consumer Privacy Act (CCPA), you have additional rights:

  • Right to Know: What personal information we collect and how we use it (covered in this policy).
  • Right to Delete: Request deletion of your personal information.
  • Right to Opt-Out: We do not sell personal information, so there's nothing to opt out of.
  • Non-Discrimination: We won't treat you differently for exercising your privacy rights.

To exercise these rights, email privacy@panchomoney.com.

10. Cookies & Analytics

We use cookies to make PanchoMoney work better:

  • Essential cookies: Keep you logged in and remember your preferences. Required for the app to function.
  • Analytics & error monitoring: We use PostHog for product analytics (how features are used, so we can improve) and Sentry for error monitoring (so we can find and fix bugs). These don't track you across other websites.

You can control cookies in your browser settings, but some features may not work without essential cookies.

11. Age Requirement

PanchoMoney is for adults (18+). We don't knowingly collect data from minors. If you believe a minor has provided us with personal information, please contact us and we'll delete it.

12. Policy Updates

We might update this policy as PanchoMoney evolves. When we do, we'll update the date at the top. Major changes get announced via email to registered users.

13. Questions?

We're real people and happy to help. Reach out anytime:

Email: privacy@panchomoney.com

Phone: (425) 270-5200