ESNY Connect, Inc. ("we", "us") operates The Dream Life Blueprint, a personal life-planning application. This policy explains what personal information we collect, how we use it, how long we keep it, and the choices you have. We do not sell your personal information.
Information we collect
- Account information: name, email address, and authentication credentials managed by our authentication provider.
- Content you create: goals, journals, plans, photos, notes, documents, and other entries you add to the app.
- Financial information you choose to connect: when you link a bank, card, or investment account through Plaid, we receive account names and balances, transactions, and account owner details from your financial institution.
- Financial information you enter manually: budgets, assets, debts, cash-flow figures, and property records.
- Payment information: subscription and billing status from our payment processor. We never receive or store full card numbers.
- Technical information: log and diagnostic data such as IP address, device/browser type, and error reports used to keep the service secure and working.
How we use your information
- To provide, personalize, and support the features you use.
- To display and analyze your financial position when you connect accounts or enter data.
- To authenticate you, secure your account, and detect abuse or fraud.
- To process subscription payments.
- To communicate with you about your account or the service.
We use AI features (for example goal extraction or plan suggestions) only on content you submit to that feature. Content sent to an AI provider is used to produce your result and is not used by us to train models.
Consent
We collect, process, and store your data on the basis of your consent, which you give when you create an account and when you take specific actions such as connecting a financial account through Plaid. Before Plaid Link is launched we tell you what will be connected and why, and you can decline or disconnect at any time. Withdrawing consent for a connection stops further data collection from that institution.
Plaid
We use Plaid Inc. ("Plaid") to connect your financial accounts. By connecting an account you grant us and Plaid the right to access and transmit your financial data in accordance with Plaid's End User Privacy Policy. We do not store your bank credentials; they are entered directly with your institution through Plaid. Access tokens are stored encrypted and used only to refresh data for your account.
How we share information
- Service providers who operate the product on our behalf (cloud hosting and database, authentication, Plaid for account connectivity, our payment processor, and AI model providers for features you invoke). They may use your data only to provide their service to us.
- People you invite: if you share an event, a budget, or another collaborative feature, the people you invite can see the content you shared with them.
- Legal reasons: when required by law, legal process, or to protect rights and safety.
- We do not sell personal information and we do not share it for third-party advertising.
Retention and deletion
We retain your data for as long as your account is active. Content you delete in the app is removed from our production database. Financial connections stop collecting data as soon as you disconnect them. If you close your account, we delete your account content within 30 days, except where we must keep limited records (for example billing records) to meet legal or accounting obligations. Encrypted backups roll off within 30 days. This policy is reviewed at least annually.
Your rights
You may request access to, correction of, export of, or deletion of your personal information, and you may withdraw consent for any connected financial account. Email alec.stallman@gmail.com and we will respond within 30 days. Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA/CPRA.
Security
All traffic is encrypted in transit with TLS 1.2 or better, and all data — including data received from the Plaid API — is encrypted at rest by our cloud database and storage provider. Access to production systems is limited to authorized personnel and protected by multi-factor authentication. You can enable two-step verification on your own account in the portal under Account security. See our Security page for details.
Children
The service is not intended for anyone under 18 and we do not knowingly collect their data.
Changes
If we make material changes we will update this page and, where appropriate, notify you by email. Continued use after an update means you accept the revised policy.