This Privacy Policy describes how Internet Financial Company, LLC, a Delaware limited liability company doing business as BudgetSimple and BudgetKit (“Company,” “we,” or “us”), collects, uses, shares, and protects personal information in connection with our websites, including budgetsimple.com, and our software-as-a-service platform, mobile applications, APIs, SDKs, and embeddable components (collectively, the “Services”). It also explains the privacy rights that may be available to you and how to exercise them.
1. Our Roles and Who This Policy Covers
BudgetSimple is a white-label, business-to-business platform. How this Policy applies to you depends on your relationship with us.
Site visitors and prospects. If you browse our websites, use our free calculators, request a demo, or otherwise interact with us directly, we are the controller (or “business”) responsible for the personal information described in this Policy.
Business customers and their administrators. If your organization purchases the Services under our Master Services Agreement and a Service Order, we are the controller for the account, billing, and relationship information of your organization and its administrators.
End users of our business customers. If you use a budgeting, financial education, coaching, or similar service offered by one of our business customers, including under that customer’s own brand, that organization decides what information is collected and how it is used, and that organization’s privacy policy governs. We process that information as a processor or service provider on the organization’s behalf, only on its instructions and under our agreement with it. If you have questions about that service or want to exercise privacy rights over that information, contact the organization that provides your service. We will refer requests we receive to that organization and assist as required by applicable law.
2. Information We Collect
We collect the following categories of personal information. Where we process information on behalf of a business customer, that information is the customer’s Subscriber Data, and the categories collected in any deployment depend on the features that customer has enabled.
| Category | What it includes and where it comes from |
|---|---|
| Contact and identity data | Name, email address, phone number, organization, and title, collected when you visit the Site, request a demo, contact us, or create an account. |
| Account and profile data | Login credentials, roles and permissions, preferences, and profile details for administrators and users of the platform. |
| Platform financial data (Subscriber Data) | Budgets, transactions, debts, goals, notes, coaching and program records, learning activity, and other information that business customers and their users submit to or generate within the platform. |
| Connected financial account data | Account, balance, and transaction information received from financial data aggregators when a user chooses to link a financial account. |
| Credit-related data | Where a business customer enables credit-education features, credit report, credit score, and credit monitoring data received from credit data providers with the consumer’s authorization. |
| Payment and billing data | Billing contacts, invoicing details, and payment records processed through our payment processor. We do not store full payment card numbers. |
| Communications | Support requests, emails, demo and call records, and feedback you provide. |
| Device and usage data | IP address, browser and device type, pages viewed, log data, and cookie identifiers collected automatically when you use the Site or the Services. |
We receive information from third parties, including financial data aggregators, credit and identity data providers, and payment processors, only in connection with features a business customer has enabled and with the required user authorization.
3. How We Use Information
We use personal information to: (a) provide, operate, maintain, secure, and support the Services; (b) create and administer accounts, billing, and invoicing; (c) respond to inquiries and provide customer support; (d) send service communications, including updates, security notices, and administrative messages; (e) send marketing communications about our Services to business contacts, which you can opt out of at any time; (f) monitor for and prevent fraud, abuse, and security incidents; (g) create aggregated or de-identified data that does not identify any person or customer, which we use to operate, analyze, and improve the Services; and (h) comply with law and enforce our agreements. Where we process Subscriber Data on behalf of a business customer, we do so only as necessary to provide, maintain, secure, and support the Services, to comply with the customer’s instructions, or to comply with law.
4. How We Share Information
Service providers and subprocessors. We share personal information with providers that support the Services, including Amazon Web Services for cloud hosting and infrastructure, Stripe for payment processing, Google Analytics for site and product analytics, financial data aggregators for account connectivity, credit data providers for credit-education features, and providers of email, communications, and customer support tools. These providers are bound by contract to protect personal information and to use it only as directed by us.
The organization that provides your service. If you are an end user of one of our business customers, your information in the platform is available to that organization and the personnel it authorizes, such as its coaches and administrators.
Providers you authorize. When you choose to link a financial account or authorize credit-related features, we exchange information with the applicable financial institution or data provider at your direction.
Professional advisers. We may share information with our lawyers, accountants, auditors, and insurers where needed.
Legal and protection. We may disclose information when required by law or legal process, or when necessary to protect the rights, safety, or property of the Company, our customers, or others.
Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of the transaction, subject to this Policy or an equally protective successor policy.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
5. Financial Information
We treat nonpublic personal financial information with heightened care, consistent with applicable financial privacy laws, including the Gramm-Leach-Bliley Act where applicable. Connected financial account data and credit-related data are used solely to provide the features requested through the applicable customer’s deployment, are shared only with the applicable organization and the providers necessary to deliver those features, and are never sold.
6. Cookies and Analytics
We use essential and functional cookies to operate the Site and the Services, and we use Google Analytics to understand how the Site is used and to improve it. Google Analytics uses cookies and collects device and usage data on our behalf. You can learn how Google uses this information at https://policies.google.com/technologies/partner-sites and opt out of Google Analytics using the browser add-on available at https://tools.google.com/dlpage/gaoptout. We do not use advertising cookies. You can manage cookies through your browser settings; disabling essential cookies may affect functionality. Where required by applicable law, we honor recognized opt-out preference signals such as the Global Privacy Control.
7. Data Retention
We retain personal information for as long as needed for the purposes described in this Policy. Account and relationship information is retained for the duration of the relationship and a limited period afterward for legal, accounting, and recordkeeping purposes. Subscriber Data is retained in accordance with our agreement with the applicable business customer: following expiration or termination, the customer has a standard export period, after which the data is deleted in accordance with our standard retention practices, with copies in routine backups deleted through our ordinary retention cycle. System logs are generally retained for up to twelve months. In deciding retention periods, we consider the nature and sensitivity of the information, legal and contractual requirements, and the need to resolve disputes and enforce agreements.
8. Security
We maintain administrative, physical, and technical safeguards consistent with reasonable industry practice, including encryption of data in transit, encryption of data at rest, multi-factor authentication for privileged access, and access limited to personnel with a legitimate business need. No method of transmission or storage is completely secure. If a security incident affects your personal information, we will provide notice as required by applicable law.
9. Where We Store Information
We store and process personal information primarily in the United States, using cloud infrastructure provided by Amazon Web Services.
If you access the Services from outside the United States, you understand that your information will be processed in the United States, where privacy laws may differ from those of your jurisdiction.
10. Your Privacy Rights
Depending on where you live, applicable law may give you the right to: (a) know what personal information we collect and access a copy of it; (b) correct inaccurate personal information; (c) delete personal information; (d) receive personal information in a portable format; (e) opt out of the sale or sharing of personal information or its use for targeted advertising; (f) limit the use of sensitive personal information; (g) not be discriminated against for exercising your rights; and (h) appeal a decision on your request.
To exercise these rights, email admin@budgetsimple.com or write to us at the address in Section 13. We may need to verify your identity before responding, and you may use an authorized agent where permitted by law. We will respond within the timeframes required by applicable law.
If we hold your information as a service provider for one of our business customers, please direct your request to that organization, which is responsible for responding. We will refer requests we receive to the applicable organization and assist it as required by law.
11. Children’s Privacy
The Site and the Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at admin@budgetsimple.com and we will delete it.
12. Changes to This Policy
We may update this Policy from time to time by posting a revised version with a new Date of Last Revision. If we make material changes, we will provide reasonable notice, such as a notice on the Site or an email to account contacts. Changes are effective upon posting unless otherwise stated.
13. Contact
Internet Financial Company, LLC, 2810 N Church St, Ste 56869, Wilmington, DE 19802, United States
Email: admin@budgetsimple.com
Email: admin@budgetsimple.com