Data Retention & Disposal Policy

Buyancy retains consumer data only for as long as an account is active, and only for the purpose of powering the What-if verdict engine — safe-to-spend calculations, recurring bill and paycheck detection, and goal tracking.

Your goals, bills, hand-entered accounts, chosen pay and past questions and answers are kept for the lifetime of your account, sealed to a key only you hold (see the Privacy Policy). Bank balances and transactions are not stored: they are read from Plaid or Wealthica when needed and used while a page or an answer is prepared. Everything is encrypted in transit (TLS 1.2+) between your device, our servers, and every third-party service we use. Bank-connection credentials (Plaid access tokens and the Wealthica login name) are additionally encrypted at rest with AES-256-GCM, with a key held on our servers, before they are stored.

Account deletion triggers the following automatically:

1. Every Plaid access token tied to your account is revoked directly with Plaid — not just deleted from our database, actually disposed of at the source, so it can no longer be used by anyone, including us.
2. Your account records, goals, bills and saved answers are permanently deleted from our database, and so is the backup of your key.
3. Your identity record is deleted.

This is a hard delete from our production database, not a soft-delete or flag. Our database host may keep backups on its own schedule; what you saved in Buyancy is sealed in them too.

Records of past answers are kept in an append-only ledger even after account deletion, with the link to you removed, so any verdict can still be traced back. Each record is sealed to your key: it holds your question, the intent we extracted, the simulation output and a hash of the financial snapshot behind the verdict, and none of it is readable without your key. Once your account and the backup of your key are deleted, nothing we hold can open it. A few plain fields stay readable so the ledger can be kept in order: when it was made, the day a purchase was meant to happen, and whether it was a real verdict or a clarifying question.

Questions about this policy can be sent to shubhamporiya@gmail.com. See also our Privacy Policy.