Where your data goes

Every third party we use, what each receives, why, and for how long. No vague promises — the actual list. When this list changes, this page changes.

Service	What it receives	Why	Retention
Plaid	Your bank credentials (entered on Plaid's own pages — Midas never sees them); account and transaction data flows back to Midas.	Bank and investment connections	Until you disconnect an account or delete your Midas account — we then unlink the connection at Plaid.
Stripe	Payment card details (entered on Stripe's checkout — never touches Midas servers), billing address, email.	Subscription billing and tax	Per Stripe's retention rules; your subscription is canceled on account deletion.
Anthropic	Aggregated financial figures (totals, category sums) used to write your briefing text. Never credentials, never account numbers.	Writing the weekly briefing narrative	Not used for model training; retained per Anthropic API policy.
CoinGecko	The coin symbols you track (e.g. "bitcoin"). No identity, no quantities.	Crypto prices	Nothing stored about you.
Resend	Your email address and the content of account emails.	Verification, reset, trial, and security emails	Delivery logs per Resend policy.
Cloudflare	Standard web traffic metadata (IP, headers) as the network in front of Midas.	DDoS protection and routing	Standard edge logs.
Backup storage	Encrypted database backups (AES-256-GCM — encrypted before leaving our host; the key never leaves it).	Disaster recovery	Rolling window; old backups age out.

What never leaves Midas

Your session data, your two-factor secrets, and your Plaid access tokens (encrypted at rest with AES-256-GCM). Midas sells no data, shows no ads, and takes no referral fees from financial products.

Your controls

Export everything as JSON at any time — including after your trial ends. Delete your account and Midas unlinks your banks, cancels billing, and erases your data. Read the Privacy Policy for the formal version.