Last Updated: May 4, 2025
IMPORTANT NOTICE
This Privacy Policy describes how Pencive LLC collects, uses, shares, and protects your personal and financial information. Please read this Privacy Policy carefully before using our Service or submitting any information to us.
At Pencive LLC ("Pencive," "we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Service"). Given the financial nature of our Service, we understand the sensitivity of the information you entrust to us and are committed to protecting your privacy and maintaining the security of your information.
We collect the following categories of information:
Personal Information is information that identifies, relates to, describes, or can be reasonably linked to a particular individual. We may collect the following types of Personal Information:
Given the nature of our Service, we collect and process various types of financial information, which may include:
When you connect your financial accounts to our Service, you may provide us with credentials (such as usernames and passwords) for these accounts. We handle these credentials with the utmost security, as detailed in the "Data Security" section below.
We collect information about how you interact with our Service, including:
We use cookies, web beacons, pixels, and similar technologies to collect information about your browsing behavior, enhance your experience, and improve our Service.
These technologies may collect information such as your IP address, browser type, operating system, referring URLs, device information, pages visited, and time spent on the Service. We use this information to analyze trends, administer the Service, track users' movements around the Service, and gather demographic information about our user base as a whole.
Types of cookies we use:
You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse to accept cookies and to delete cookies. However, if you do not accept cookies, you may not be able to use some portions of our Service.
We collect information through various methods, including:
We collect information directly from you when you:
We automatically collect certain information when you use our Service, including:
For certain features of our Services, we use secure third-party data aggregators such as Plaid ("Plaid") to facilitate connections to your financial accounts. When you connect your financial accounts through Plaid, you are also subject to Plaid's Privacy Policy.
We may receive information about you from third parties, including:
We use the information we collect for various purposes, including:
We are committed to maintaining your trust, and we want you to understand when and with whom we may share your information. We do not sell your personal information.
We may share your information with third-party service providers who help us deliver and improve our Service, including:
These service providers are bound by contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.
If Pencive is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information via email or through a prominent notice on our Service.
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose your information to:
We may share your information with third parties when you have given us your consent to do so. For example, we may ask for your permission to feature your testimonial or success story on our Service or marketing materials.
Protecting your information is of the utmost importance to us. We implement robust security measures to protect your information, including:
For connecting to your financial institutions, we use Plaid, a secure third-party data aggregator. Plaid is designed with security as a priority and uses bank-level security and encryption to protect your credentials and financial information.
When you connect your accounts through Plaid:
For more information about how Plaid handles your data, please review their Privacy Policy.
While we implement appropriate security measures, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security. You are responsible for:
In the event of a data breach that compromises your personal information, we will notify you and the appropriate regulatory authorities as required by applicable law. We will provide information about the breach and steps you can take to protect yourself from potential harm.
We retain your information for as long as necessary to fulfill the purposes for which we collected it, including to provide you with the Service, comply with legal obligations, resolve disputes, and enforce our agreements.
We retain your account information for as long as your account is active. If you close your account, we will retain certain information associated with your account for:
We retain financial information retrieved from your connected accounts for as long as necessary to provide you with the Service. If you disconnect a financial account or close your Pencive account, we will delete or de-identify your financial information in accordance with our data retention policies and applicable laws.
We may retain de-identified or aggregated usage information for longer periods for legitimate business purposes, such as analyzing trends, improving our Service, and developing new features.
Depending on your location, you may have various rights regarding your personal information. These may include:
You have the right to access the personal information we hold about you and, in some cases, receive a copy of this information in a structured, machine-readable format.
You have the right to correct inaccurate or incomplete personal information we hold about you.
You have the right to request the deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected.
You have the right to restrict or object to our processing of your personal information in certain circumstances.
Where we process your information based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within the timeframe required by applicable law.
Please note that certain legal and contractual obligations may limit your rights. For example, we may retain certain information for legal, security, or fraud-prevention purposes even if you request its deletion.
You can update certain personal information and privacy preferences directly through your account settings. These options may include:
Some browsers feature a "Do Not Track" (DNT) setting that signals to websites that you do not want your online activity tracked. Because there is not yet a common understanding of how to interpret DNT signals, we do not currently respond to DNT signals on our Service.
Pencive is based in the United States, and we process and store information on servers located in the United States. If you are located outside the United States, your information may be transferred to, stored, and processed in a country where the privacy laws may not be as comprehensive as those in your country.
By using our Service, you consent to the transfer of your information to the United States and the processing of your information in the United States. Where required by applicable law, we implement appropriate safeguards for international data transfers, such as standard contractual clauses or other legal mechanisms.
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information as quickly as possible.
If you believe we might have any information from or about a child under 18, please contact us immediately using the information provided in the "Contact Us" section below.
For the purposes of applicable data protection laws, Pencive LLC is the data controller of your personal information. This means we determine the purposes and means of the processing of your personal information collected through the Service.
As a data controller, we are committed to respecting your data protection rights and handling your information responsibly and transparently. We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions regarding this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact our DPO using the details provided in the "Contact Us" section.
We may use automated decision-making processes, including profiling, for the following purposes:
These automated processes help us provide you with a more relevant and secure experience. However, we do not make decisions that would have a significant impact on you based solely on automated processing without human oversight.
In jurisdictions where you have the right, you may:
We may transfer your personal information to countries other than the one in which you reside. We primarily store and process data in the United States, but we may engage service providers or operate infrastructure in other countries.
When we transfer personal information outside of your country of residence, we implement appropriate safeguards to ensure your information receives an adequate level of protection. These safeguards may include:
For more information about these safeguards or to obtain a copy of them, you can contact us using the information provided in the "Contact Us" section.
When we engage third-party service providers to process personal information on our behalf, we enter into data processing agreements that require these providers to:
We carefully select our service providers to ensure they provide sufficient guarantees to implement appropriate technical and organizational measures to meet the requirements of applicable data protection laws.
Our Service may contain links to third-party websites, services, or applications that are not owned or controlled by Pencive. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We strongly advise you to review the privacy policy of every website you visit.
If you connect your Pencive account with a third-party service, we may receive information from that service. This Privacy Policy does not apply to information collected by third parties, and we encourage you to read their privacy policies.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.
For material changes to this Privacy Policy, we will make reasonable efforts to provide notice before the changes take effect, such as through a prominent notice on our Service or by sending you an email. We encourage you to review this Privacy Policy periodically for any changes.
Your continued use of the Service after we post changes to this Privacy Policy means you accept those changes.
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information. This section describes your CCPA/CPRA rights and explains how to exercise those rights.
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months.
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.
You have the right to request that we correct inaccurate personal information that we maintain about you.
We will not discriminate against you for exercising any of your CCPA/CPRA rights. Unless permitted by the CCPA/CPRA, we will not:
To exercise your rights described above, please submit a verifiable consumer request to us by contacting us using the information provided in the "Contact Us" section below. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We will respond to your request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.
If you have any questions about this Privacy Policy or our privacy practices, please contact us using the following methods:
Email:
For Data Subject Rights Requests:
Please email privacy@pencive.com with the subject line "Privacy Request."
We are committed to ensuring that our Privacy Policy is accessible to individuals with disabilities. If you require this Privacy Policy in an alternative format due to a disability, please contact us at accessibility@pencive.com, and we will provide you with the information in a format that meets your needs.
Given the sensitive nature of financial information, we implement robust security measures beyond the standard practices mentioned earlier:
We use industry-leading encryption standards to protect your data:
Our infrastructure security includes:
We implement strict access controls:
Our employee security practices include:
If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). These rights include:
If you wish to exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within one month, which may be extended by up to two additional months where necessary, taking into account the complexity and number of requests.
You also have the right to lodge a complaint with a supervisory authority. The lead supervisory authority for Pencive is the Delaware Department of Justice, Division of Consumer Protection, though you may contact your local data protection authority.
We only process your personal data when we have a legal basis to do so. The legal bases we rely on include:
If you are a resident of the United Kingdom, your personal data is protected under the UK GDPR and the Data Protection Act 2018. You have similar rights to those described in the European Union Data Protection Rights section, including the right to access, rectify, erase, restrict processing, object to processing, and data portability.
The UK Information Commissioner's Office (ICO) is the supervisory authority for data protection issues in the UK. You have the right to lodge a complaint with the ICO if you believe that we have not complied with the requirements of the UK data protection legislation.
To help you understand this Privacy Policy, we've defined some key terms:
As a provider of financial data aggregation services, we comply with various financial regulations that may apply to our collection, processing, and storage of financial information. These include:
The GLBA requires financial institutions to explain their information-sharing practices to customers and to safeguard sensitive data. As a financial technology company that processes financial information, we adhere to GLBA requirements, including:
We monitor and comply with applicable CFPB regulations regarding financial data access, consumer financial data rights, and data security requirements.
For connecting to your financial institutions, we use Teller.io, a secure third-party data aggregator. Teller.io is designed with security as a priority and uses bank-level security and encryption to protect your credentials and financial information.
When you connect your accounts through Teller.io:
For more information about how Teller.io handles your data, please review their Privacy Policy and Terms of Service.
Where applicable, we comply with requirements related to anti-money laundering (AML) and countering the financing of terrorism (CFT), which may include:
We take the security of your information seriously and have established comprehensive procedures to address potential data breaches:
We have implemented systems to detect potential security incidents and data breaches. Upon detection of a breach or suspected breach, we will:
If we determine that a breach has occurred that requires notification under applicable law, we will notify affected individuals and relevant regulatory authorities within the timeframes required by law, which may vary depending on the jurisdiction. For example:
Our breach notifications will include, to the extent known:
We maintain a record of changes to this Privacy Policy to help you understand how our privacy practices have evolved:
May 4, 2025:
Initial Privacy Policy published.
Effective Date: May 4, 2025
© 2025 Pencive LLC. All rights reserved.