Data Retention and Deletion Policy

• Account (name, email, password hash): until you delete your account.
• Budget data (accounts, categories, assignments, transactions): until you delete it, or delete your account. That includes transactions imported from a bank: once imported, they're part of your budget.
• Bank access tokens: until you disconnect that bank or delete your account. Either one revokes the token at Plaid first, then deletes it from our database.
• The list of accounts a bank connection exposes (names, last four digits, balances): deleted together with the connection.
• Consent records (when you accepted our terms and privacy policy, and which version): kept with your account, and deleted with it.
• Database backups: our database provider keeps encrypted backups for disaster recovery. Deleted data disappears from them as they expire, within 30 days.
• Operational records (that a sync failed or a scheduled job ran, with names, emails, account numbers and amounts removed): 90 days.
• Request logs: kept by our hosting providers for operations and security, for no more than 30 days.

• Keep a copy first, if you like: Settings → Profile → Download your data gives you every transaction and your budget, month by month, as CSV files.
• Delete your account from Settings → Profile. Claros disconnects every bank at Plaid, then permanently deletes your account and every record that belongs to it. This happens immediately and can't be undone.
• Disconnect a bank from Settings → Bank connections. Our access ends immediately; transactions already imported stay in your budget until you delete them.
• Delete individual transactions, accounts, or categories in the app. They're removed from our database immediately.
• Or ask us at support@claros.money, and we'll delete your account within 30 days and confirm when it's done.

Deleting an account removes the account and, through the database's own constraints, every row that belongs to it in the same operation, so nothing is left behind unowned. We don't keep a hidden copy, an archive, or anonymized versions of deleted budgets. Revoking bank access happens at Plaid, so a revoked token stops working everywhere, not just in Claros.

This policy is designed to meet applicable data-privacy laws, including deletion rights such as those under the California Consumer Privacy Act. We review it at least once a year, and whenever Claros starts collecting a new kind of data or adds a service provider. The date above shows the last change.

Questions or deletion requests: support@claros.money.