FinFuse

Data Retention and Deletion Policy

Last updated October 3, 2026

This policy says what information FinFuse keeps, for how long, how you delete it, and what other companies keep that FinFuse cannot delete for you. It is part of our Privacy Policy. It is reviewed at least once a year, and whenever FinFuse starts handling a new kind of information. Last reviewed October 3, 2026; next review due by October 3, 2027.

1. The rule

FinFuse keeps your information only while you have an account or a connection that needs it. You can delete your numbers, unlink your bank, or delete your whole account yourself, in Settings, at any time. When you delete your account, it is removed from our live database straight away; we do not keep a copy for ourselves, apart from the exceptions in section 5.

2. What we keep, and for how long

Account details (email, name, a one-way hash of your password, and a record of when you agreed to the Terms and Privacy Policy): until you delete your account.
Your saved numbers and settings: until you delete them or delete your account.
A bank connection (an encrypted access token, the bank’s name and a connection id): until you unlink the bank or delete your account. Balances read from your bank are not kept, unless you press “Use its balances,” which copies them into your saved numbers.
Your record of agreeing to a bank connection (when you agreed and which version of the words you saw): until you delete your account. It is kept after you unlink so that we can show what you agreed to.
The link to your investing account (the account id and transfer relationship id that Alpaca gave): until you delete your account. The identity details you type to open an investing account are passed to Alpaca and not kept by FinFuse.
Membership activity (Paper, Predict and Print records), tied to the Whop membership linked to your account: until you delete your account.
Messages you sent from the Contact page: until you delete your account, or 24 months after you sent them, whichever comes first.
Bank connection status (the bank’s Plaid identifier, and whether the connection needs you to sign in again), kept with the connection. An unfinished bank sign-in (a link token, stored encrypted): up to 30 minutes, so a bank that signs you in on its own site can send you back. A one-time notice that a bank was disconnected: until you dismiss it or delete your account.
Sign-in sessions: 30 days. Password reset links: one hour; the used or expired record is deleted within a day.

3. How deletion works

Delete your numbers (Settings): your saved numbers are removed from your account at once.
Unlink your bank (Your numbers): FinFuse tells Plaid to remove the connection, deletes the stored token, the bank’s name and the connection id, and marks your agreement withdrawn so linking again asks again.
Delete your account (Settings): you confirm with your password and by typing DELETE. FinFuse first tells Plaid to remove every bank connection you have. If Plaid cannot be reached, nothing is deleted and you are asked to try again, so a connection is never left behind that we can no longer remove. Then, in one step, FinFuse deletes your account, saved numbers, bank records, agreement records, the link to your investing account, your membership activity and the Contact messages sent from your account’s email address, and signs you out.

4. Automatic clean-up

A daily job deletes password-reset records that were used or expired more than a day ago, and Contact messages more than 24 months old. Sessions expire by themselves after 30 days.

5. What deleting your account does not remove

Some information is held by other companies, and FinFuse cannot delete it for you:

Alpaca. Your brokerage account belongs to Alpaca, which keeps the records a broker is required by law to keep. Deleting your FinFuse account removes only FinFuse’s link to it. To close the brokerage account, close it with Alpaca; do that first if you want to be sure you can still reach your holdings.
Plaid. After FinFuse removes your connection, Plaid keeps what it collected about you under the Plaid End User Privacy Policy. You can manage and delete it at my.plaid.com.
Whop. Billing and membership records for anything you bought are held by Whop.
Recovery copies. Our database provider keeps short-lived recovery copies. Information you delete leaves them when they expire, which is the restore window of our database plan, to be confirmed.
Hosting logs. Standard request logs, which include IP addresses, are kept by our hosting provider on its own schedule.
Your own browser. Display preferences and any numbers you kept without signing in stay in your browser until you clear them.

We may also keep information that the law requires us to keep, or that we need to resolve a dispute, for as long as that need lasts.

6. If you cannot use Settings

Contact us through our contact page and tell us the email address on the account. We will confirm that the request comes from you, carry it out, and reply within 30 days. For a bank connection, you can also remove it yourself at my.plaid.com.

7. Review

FinFuse reviews this policy, and checks that the deletion steps above still work as written, at least once a year and whenever a new kind of information is added. When the policy changes, we change the date at the top of this page.

8. Contact

Questions about this policy? Contact us through our contact page.