Privacy Policy

1. Overview

Anemone helps people manage address and contact updates across banks, subscriptions, merchants, utilities, and other services. To do that, we process account information you provide, address and contact data you manage in the product, and—when you choose to connect a financial institution—limited financial account and transaction information obtained through our banking data partner, Plaid.

2. Information we collect

Depending on how you use the Services, we may collect:

• Account and identity information — such as name, email address, and authentication details (including multi-factor authentication status) managed through our identity provider, Clerk.
• Address and contact information — household or mailing addresses, phone numbers, and related profile details you enter or update in Anemone.
• Financial connection information (via Plaid) — when you use Plaid Link to connect a bank or similar institution, we may receive account identifiers, institution and account metadata (for example account name, type, and mask), and transaction history used to help identify merchants and recurring relationships that may need an address update. We do not receive your bank login credentials; those are handled by Plaid and your financial institution.
• Integration and usage information — records of connections to partner apps or merchants, contact-update requests and decisions, product interaction and diagnostic logs, device/browser information, cookies and similar technologies (see Section 7), and approximate location derived from IP address.
• Communications — messages you send us (for example support or privacy requests).

3. How we use information

We use personal information to:

• Provide, operate, secure, and improve the Services
• Authenticate users and enforce security controls such as MFA
• Help you discover merchants and services that may need updated contact or address information
• Process and transmit address or contact updates you authorize to connected partners
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations and enforce our terms
• Respond to support and privacy requests

We do not sell your personal information. We do not use Plaid-connected financial data to market unrelated third-party products to you.

4. Plaid and financial data

If you choose to link a financial account, you authorize Anemone to obtain information from Plaid as described in Plaid's own disclosures presented in Link and in the Plaid End User Privacy Policy. We store access credentials or tokens needed to retrieve account and transaction data for the purposes described above, and we retain transaction and account metadata only as long as needed to operate features you use (such as merchant detection and bank account linking) or as required by law.

You can disconnect linked accounts in the product where available, or contact us to request deletion of associated data subject to the limits in Section 8.

5. How we share information

We may share personal information with:

• Service providers who help us operate the Services (for example hosting, authentication, email delivery, analytics, and Plaid for financial connections), under contractual obligations to protect the data
• Partner apps and merchants when you connect an integration or explicitly authorize an address or contact update to be shared with them
• Professional advisors and authorities when required by law, legal process, or to protect rights, safety, and security
• A successor entity in connection with a merger, acquisition, or similar corporate transaction, subject to appropriate protections

7. Cookies

We use cookies and similar technologies on the Services. Because Anemone is not yet offered to users in the European Economic Area, the United Kingdom, or Switzerland as a supported market, this section still describes our cookie practices and the choices we provide.

We group cookies as follows:

• Necessary — required to operate the Services, including authentication and session cookies (Clerk), security controls, the Plaid session cookie used when you connect a financial account, and the cookie that stores your cookie preferences. These cookies do not require opt-in.
• Analytics — optional cookies or scripts that help us understand how the Services are used. We do not set these unless you accept them.
• Preferences — optional cookies that remember non-essential display or feature choices. We do not set these unless you accept them.

When you first visit, we show a cookie banner so you can accept optional cookies, continue with necessary cookies only, or customize categories. You can change that choice at any time from the Cookies link in the footer. Optional cookies remain off until you accept them.

8. Retention

We retain personal information for as long as your account is active and as needed to provide the Services, resolve disputes, enforce agreements, and meet legal, tax, or security requirements. When information is no longer needed, we delete or de-identify it in accordance with our operational practices.

9. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, and authentication requirements for sensitive flows. No method of transmission or storage is completely secure; we cannot guarantee absolute security. Additional product security practices are described on our Security page.

10. Your choices and rights

Depending on your location, you may have rights to:

• Access, correct, or delete personal information we hold about you
• Request a copy of certain personal information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, email corywoolf@gmail.com. We may need to verify your identity before fulfilling a request. You may also update certain account details in the product or close your account. You can accept or reject optional cookies at any time from the Cookies link in the footer. Some information may be retained where we have a lawful reason to keep it (for example security logs or records of authorized partner updates).

If you are a California resident, you may have additional rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and to opt out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell personal information as that term is commonly understood, and we do not use sensitive personal information to infer characteristics about you beyond providing the Services you request.

11. Children

The Services are not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

12. International users

Anemone is currently designed for users in the United States. If you access the Services from outside the United States, you understand that your information may be processed in the United States, where privacy laws may differ from those in your country.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the effective date above. If changes are material, we will provide additional notice as appropriate (for example in-product or by email).

14. Contact us

For privacy questions or requests, contact us at corywoolf@gmail.com.

Website: https://www.anemoneos.com