At Copilot Money, we believe in transparency about our data practices. In this Privacy Policy (“Policy”), we strive to comprehensively explain how we at Copilot Money, Inc. (“Copilot”, “we”, “our”, or “us”) collect, use, and disclose information through our websites and applications that link to this Privacy Policy.
While this Policy covers all of data practices across our different services, including the Copilot mobile and desktop apps, www.copilot.money, and other channels (e.g., customer service and other communications) that you may use to interact with Copilot (collectively, the “Services”), our privacy practices may differ for the different types of data we process and depending on the Services you are using. In particular, our data disclosure practices on our marketing website and registration flow differ from those in our app platform. We do not sell your Financial Information (as defined below) that you enter or integrate into the app, such as your connected bank accounts, financial transactions, balances, holdings, budgets, and goals, and this information is never used to generate or influence advertising. Our marketing website operates differently; it incorporates advertising technology so we can spread the word about our Services to more people. Similarly, we may provide certain identifiers, like a hashed email address, to third-party platforms so that those platforms can display Copilot ads to potentially interested audiences on other services and websites. Please read this Policy closely to better understand our practices across our various Services.
PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE HANDLE YOUR INFORMATION. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICES.
This Privacy Policy includes the following sections:
1. Information We Collect
2. How We Use Your Information
3. Cookies and Similar Technologies
4. Online Analytics and Advertising
5. How We Share Your Information
6. How We Protect Your Information
7. Retention of Information
8. Third Party Links and Features
9. Children’s Privacy
10. Your Rights and Choices
11. Notice to California Residents
12. Notice to Nevada Residents
13. Changes to this Privacy Policy
14. Contact Information
1. INFORMATION WE COLLECT
Information You Provide Directly. We collect information that you provide when you use the Services or otherwise communicate with us. For example, when you:
Create an account to use the Services, we may collect contact and registration information, such as your name and email address. We may also collect payment information, including your payment card number and associated billing information, and other profile information you upload to your account.
Interact with the Services through your Copilot account, we may collect information that you enter, upload, provide, or link in relation to your Copilot Money account, including financial information such as such as your connected bank accounts, financial transactions, balances, holdings, budgets, and goals (“Financial Information”), information about other users, and descriptions regarding the foregoing. You may also provide your bank account credentials to our third-party partners (such as Plaid and Finicity) to facilitate integrations with Financial Data Sources; however, we do not have direct access to such credentials.
Interact with the Services outside of the context of uploading or providing Financial Information, we may collect information associated with your use of our Services, such as when you visit and use our website, sign up for our newsletter, or download our guides.
Contact us with questions, comments, or for customer service, we may collect contact information, such as your name and email address, as well as any information you provide in connection with your outreach. We may also collect any information you provide to publicly-accessible parts of the Services, such as posts or comments to user forums.. Participate in promotions, events, surveys, and sweepstakes, we may collect basic contact information and any other information you provide in connection with these activities.
Choose to integrate the Services with other apps/functionalities on your mobile device (e.g., your photos or contacts), we will collect information contained in these other apps/functionalities in accordance with your app and device settings.
Information You Provide via Integration with Financial Data Sources. We collect information about you when you connect your registered account with us to financial institutions and other third-party data sources (“Financial Data Sources”) or you otherwise provide us with access to information from those Financial Data Sources. For example, you may choose to connect your bank or other financial accounts with your Copilot account. To sync information from these Financial Data Sources, we will collect your Financial Information including your account balance, transactions, and holdings. Our third-party partners may also collect certain credential information necessary to facilitate an integration with a Financial Data Source that you have chosen to make, including API keys required to connect your registered account with us to cryptocurrency exchanges or wallets. We may use third-party data sources to assist in collecting and syncing your information, including Financial Information, from Financial Data Sources, and by connecting your Copilot account to a Financial Data Source, you agree to all applicable third-party sources’ terms and conditions and privacy policies.
Information from Other Sources. We also obtain information from other sources, like other users of the Services, payment vendors who provide us with payment or balance information, analytics vendors, and security vendors, who provide us with information to secure our systems, prevent fraud and help us protect the security of the Services.
If you access the Services through a third-party connection or log-in (e.g., through Sign in with Apple), you may allow us to have access to and store certain information from such third-party services, depending on your settings on that service. If you do not wish to have this information disclosed, you may be able to adjust your account settings on those third-party services, or choose not to use these connections to access our Services. Please see the privacy policies and terms for these third parties for more information.
Automatically Collected Information. We may automatically receive and store certain information about the computer or device you use to access the Services. As discussed further below, we and our vendors may use a variety of technologies, including cookies, to assist in this information.
Device Information. We collect technical information associated with the device(s) you use to access our Services, including information related to your browser and operating system, IP address (the Internet address of your computer), unique device identifiers, and other information such as your device type.
Usage Information. We also collect a variety of information to better understand your use of our Services. This may include the webpages, screens, or features of our Services you use, how much time you spend there, date, time and use, how you engage with the Services, information about your usage preferences, whether you open an email and your interaction with email content, access times, error logs, and other similar information. If you access our Services via a link on a third-party website, we may also receive certain click-through data such as the webpage that you were visiting before accessing our Services.
Location Information. We also may collect your device’s IP address or your mobile device’s GPS signal (with your permission in accordance with your device settings) when you use certain Services as well as the city, state, county, and ZIP code associated with that information.
2. HOW WE USE YOUR INFORMATION
We use your information in a variety of ways to provide the Services and to operate our business. In particular, we may use your information to:
provide the information and Services you request;
provide you with effective customer service;
personalize your experience and our communications with you;
engage in transactions with you, including contacting you about your account, billing you for the Services, and processing payments;
contact you with operational information and notices related to your use of the Services;
contact you with special offers and other promotional content related to our Services that we believe will be of interest to you (in accordance with any privacy preferences you have expressed to us);
invite you to participate in promotions, sweepstakes, surveys and provide feedback to us;
analyze use of the Services and improve the content, functionality and usability of the Services;
secure the Services and investigate and help prevent fraud, security issues, and abuse;
understand and resolve app and other crashes and other issues being reported;
comply with any procedures, laws, and regulations where necessary for our legitimate interests or legitimate interests of others;
establish, exercise, or defend our legal rights where necessary for our legitimate interests or the legitimate interests of others, including the enforcement of our Terms of Service, other usage policies, and other legal terms or controls, or to engage in other legal matters; and
for any other purpose with your consent.
Combined Information. For the purposes discussed in this Privacy Policy, we may combine the information that we collect through the Services with information that we receive from other sources, both online and offline, and use such combined information in accordance with this Privacy Policy.
Aggregate/De-Identified Information. We may aggregate and/or de-identify any information collected through the Services so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). We may use Aggregate/De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also disclose such data with any third parties at our discretion.
Artificial Intelligence. We or our vendors may use artificial intelligence (e.g., large language models) to assist us in processing your information for the purposes listed above. When our vendors use artificial intelligence to process your information, they do not train their artificial intelligence models with your information.
3. COOKIES AND SIMILAR TECHNOLOGIES
To collect the information in the “Automatically Collected Information” section above, we and our vendors may use web server logs, cookies, tags, SDKs, tracking pixels, and similar tracking technologies. We use these technologies in order to offer you a more tailored experience in the future.
A web server log is a file where website activity is stored.
An SDK is a set of tools and/or code that we embed in our applications and software to allow third parties to collect information about how users interact with the Services.
A cookie is a small text file that is placed on your computer or mobile device when you use the Services, that enables us to: (i) recognize your computer; (ii) store your preferences and settings; (iii) understand the web pages of the Services you have visited; (iv), enhance your user experience by delivering and measuring the effectiveness of content and advertising tailored to your interests; (v) perform searches and analytics; and (vi) assist with security and administrative functions. Some cookies are placed in your browser cache while those associated with Flash technologies are stored with your Adobe Flash Player files.
Tracking pixels (sometimes referred to as web beacons or clear GIFs) are tiny electronic tags with a unique identifier embedded in websites, online ads and/or email that are designed to: (1) collect usage information like ad impressions or clicks and email open rates; (2) measure popularity of the Services and associated advertising; and (3) access user cookies.
As we adopt additional technologies, we may also gather information through other methods.
We may also collect, access, or store session cookies to facilitate integrations with Financial Data Sources.
Please note that you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the “Help” section of your browser for more information (e.g., Internet Explorer; Google Chrome; Mozilla Firefox; or Apple Safari). You can also manage the use of Flash technologies, including flash cookies and local storage objects with the Flash management tools available at Adobe’s website. Please note that by blocking, disabling, or managing any or all cookies, you may not have access to certain features or offerings of the Services.
4. ONLINE ANALYTICS AND ADVERTISING
We may use third-party analytics services (such as Google Analytics and Amplitude Analytics) on our Services to collect and analyze usage information through cookies and similar technologies; engage in auditing, research, or reporting; assist with fraud prevention; and provide certain features to you. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by clicking here. For more information on the privacy practices of Amplitude, please visit the Amplitude Privacy Policy or write to Amplitude at privacy@amplitude.com.
We may also work with a number of companies that assist in marketing our services to you on third party websites, mobile apps, and online services. These third parties may use cookies, web beacons or other tracking technologies to collect information about your use of the Services and your activities across other websites and online services, which they may associate with persistent identifiers. Sometimes, these identifiers may be derived from a hashed or encrypted version of personal information such as your email address. We may use this information to measure the performance of our advertising as well, for instance, to evaluate which ads or content our users prefer, or which are most effective. In addition, sometimes we or an advertising partner may tailor advertising to you across different devices.
Their activities and your choices regarding their use of your information to personalize ads to you are subject to and set out in their own policies. We neither have access to, nor does this Privacy Policy govern, the use of cookies or other tracking technologies that may be placed on your computer, mobile phone, or other device by non-affiliated, third-party providers. As described below, these providers may offer you a way to opt-out of the collection of information that is used for our interest-based advertising to you. We cannot guarantee that these instructions will not change, or that they will continue to be available; they are controlled by each third-party vendor, not us.
If you are interested in more information about interest-based advertising and how you can generally control cookies other tracking technologies from being put on your computer to deliver such advertising, you may visit the Digital Advertising Alliance’s (DAA’s) Consumer Opt-Out link or TrustArc’s Advertising Choices Page. To opt out of the display of interest-based advertising from Google, please visit the Google Ads Settings page. For more information and to exercise your choices regarding Facebook and/or Instagram ads, please visit the Facebook Ads Settings page and/or the Instagram Ads Settings page.
Notice Concerning Do Not Track. Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our website for third party purposes, and that is why we provide the variety of opt-out mechanisms listed above. Because of the changing state of technology and indecision within the industry regarding the meaning of DNT signals, we currently do not make any guarantee that we will honor DNT signals. Learn more about Do Not Track.
5. HOW WE DISCLOSE YOUR INFORMATION
We do not share Financial Information (whether provided by you manually or via a Financial Data Source integration) with (1) other companies for joint marketing purposes; or (2) any third parties so they can market to you. We may disclose or transfer information collected from and about you in the following circumstances:
Vendors. We may share information with select third parties who provide services to us, such as customer service, interfacing with Financial Data Sources, analytics, website management, information technology, and other similar services.
Financial Data Sources. We may disclose information with the Financial Data Sources to help establish or maintain an integration you have chosen to make.
Other Users of this Service or the Public. To the extent that you post content in publicly-accessible parts of the Services (e.g., Features Request forum), or choose to make certain content or Financial Account Information viewable by other users or the public, such content and information can be read, collected, and used by others with permission to view it.
Comply with Laws and Protect Our Rights and the Rights of Others. We may disclose your information as we believe to be necessary or appropriate to: comply with applicable law and legal processes; respond to requests from public and government authorities, including public and government authorities outside your country of residence; enforce our Terms of Service; protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others; and allow us to pursue available remedies or limit the damages that we may sustain.
Corporate Transactions. We reserve the right to transfer your information to vendors, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.
Employer-Employee Partnerships. If you elect to participate in the Services through a business or other organization (“Partner”) as part of a Partner’s plan (“Plan”), for example, when an employer provides Copilot as an employee benefit, then we will share certain of information—such as name, email address, and the date you joined the Services—with that Partner. However, we will not disclose your Financial Information with that Partner.
With Your Consent or At Your Direction. We may share information with third parties when you direct us to do so or if you have consented to additional sharing of your information (including as set out in this Privacy Policy).
6. HOW WE PROTECT YOUR INFORMATION
We implement a variety of security safeguards designed to protect your information. However, no method or transmission over the internet or electronic system is completely secure, so there is no guarantee that such data may not be accessed, disclosed, altered, or destroyed in connection with a breach of our physical, technical, organizational, or managerial safeguards.
When you create an account, you may be prompted to create a username and password. If you create an account with us, you are responsible for maintaining the confidentiality of your account password and for any activity that occurs under your account. We are not responsible for any loss or damage arising from your failure to maintain the confidentiality of your password. We urge you to change your passwords often, use a combination of letters and numbers, and make sure you are using a secure browser. If you have reason to believe that your interaction with us is no longer secure or if you suspect someone else is using your account, please let us know immediately by contacting us as indicated in the “Contact Information” section below.
For additional details about the steps we take to protect your information, please review our Security Policy.
7. RETENTION OF INFORMATION
We will retain your information for as long as your account is active or as needed to comply with applicable legal obligations. We will also retain and use your information as necessary to resolve disputes, protect Copilot and our users, and enforce our agreements. Note that you can request deletion of your information at any time by following the steps in the Your Rights and Choices section of this Privacy Policy.
8. THIRD PARTY LINKS AND FEATURES
The Services may contain links, banners, or widgets to third-party sites, apps, services, and plug-ins, including Financial Data Sources. We may also incorporate third-party software (including open source software) in the Services.
These links and features are provided for your reference and convenience only and do not imply any endorsement of information provided through these third-party links and features, nor any association with their operators. Copilot is not responsible for the practices of such third parties. Any information you provide to third parties on their websites or services is covered under their privacy and data collection collections, and is not covered by this Privacy Policy. We urge you to read the privacy and security policies of these third parties.
9. CHILDREN’S PRIVACY
The Services are intended for a general audience and not for children under the age of 13. We do not knowingly collect, maintain, or use personal information (as defined by the United States Children’s Online Privacy Protection Act) from children under 13 years of age. If you believe that we might have any such information from a child, please contact us as described at the end of this Privacy Policy. If we learn that we have collected any personal information from children under 13, we will promptly take steps to delete such information and terminate the child’s account.
10. YOUR RIGHTS AND CHOICES
Rights Regarding Your Personal Information. Depending on your jurisdiction, you may have the right to make certain requests regarding your “personal information” or “personal data” (as such terms are defined under applicable law, and collectively referred to herein as “personal information”). Specifically, residents of certain US states (currently including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia) may have the right to ask us to:
Inform you about the categories of personal information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we disclose personal information.
Provide you access to and/or a copy of certain personal information we hold about you.
Correct or update personal information we hold about you.
Delete certain personal information we have about you.
Oregon and Minnesota residents only: Provide you with a list of specific third parties which we disclose your personal information or any consumers’ personal information to.
As provided in applicable law, you also have the right to not be discriminated against for exercising your rights.
If you are a California resident, please see NOTICE TO CALIFORNIA RESIDENTS below for more information about our privacy practices and your rights.
Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain certain information in order to provide our services to you. We also need to take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name and email address. Depending on your jurisdiction, you may be permitted to designate an authorized agent to submit certain requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent’s request. If you would like further information regarding your legal rights or would like to exercise any of them, please visit this link or email us at: privacy@copilot.money.
If you are a California resident, you may also authorize an agent (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf.
Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. If we deny your request, we will provide you with information on how to appeal the decision, if applicable, in our communications with you. To exercise such an appeal right, email us at privacy@copilot.money.
Marketing Communications. You may instruct us not to use your information to contact you by email, postal mail, or phone regarding products, services, promotions and special events that might appeal to your interests by contacting us using the information below. You can opt-out of receiving further promotional emails from us by following the unsubscribe instructions provided in the promotional email you receive or by emailing us directly at unsubscribe@copilot.money with “OPT-OUT”, “UNSUBSCRIBE”, “STOP”, or “REMOVE” in the subject line.
Removing your name from the email list may take a reasonable amount of time. Please note that, regardless of your request, we may still use and disclose certain information as permitted by this Privacy Policy or as required by applicable law. For example, you may not opt out of certain operational emails, such as those reflecting our relationship or transactions with you.
Mobile Devices. If you do not want the Service to collect information through the use of cookies, your browser may allow you to be notified when you receive certain types of cookies and restrict or disable certain cookies. Each browser is different, so you should check your browser's settings to learn how to change your cookie preferences. Please be aware that if you disable or reject cookies, some features may not work properly. In addition, we may send you push notifications through our applications. You may at any time opt out from receiving these types of communications by changing the settings on your mobile device.
Notice of Right to Opt Out of Sales of Personal Information and Processing/Sharing of Personal Information for Targeted Advertising Purposes. Copilot does not “sell” Financial Information that you provide in your use of our money-tracking platform. However, we and our third-party partners use cookies and similar technology (as explained in Section 4 of this Privacy Policy) to help us market our Services, provide more relevant advertisements on other services and websites, and analyze the performance of our ads and the types of consumers who see and interact with them. We may also provide certain non-Financial Information, including identifiers, like IP addresses and hashed email addresses, to third-party platforms so that those platforms can display Copilot ads to potentially interested audiences on other services and websites. These technologies allow us and our partners to serve tailored Copilot ads on other platforms, and to limit how often we show ads to consumers who have already subscribed to Copilot.
Although these advertising activities are a common way for companies like Copilot to promote their products and services, certain laws broadly categorize these activities as “selling” personal information or “sharing” or “processing” personal information for targeted advertising purposes—even though we never provide information in exchange for money—and require us to make certain disclosures about these activities, which we provide below. To reiterate, these activities do not apply to your Financial Information as that term is defined in this Policy; rather, these are activities we undertake in relation to our marketing website and registration data in an effort to spread the word about the benefits of Copilot.
If you would like to opt out of our online disclosure such as through cookie and pixel technology of your personal information for purposes that could be considered “sales” for those third parties’ own commercial purposes, or “sharing” for purposes of targeted advertising, please follow this link or select “Your Privacy Choices” on our website, and follow the instructions. You must make this choice on each site/app on each browser/device you use to access the Services. You must also renew this choice if you clear your cookies or your browser is set to do that. If you want to opt out of us selling or sharing/processing your personal information such as your hashed email address, and other associated personal information for targeted advertising activities through means other than cookie technology, please follow this link to complete the form.
Depending on your jurisdiction, you may be permitted to designate an authorized agent to submit such requests on your behalf.
Please note that if you have a legally-recognized browser-based opt-out preference signal turned on via your device browser, we recognize such preference in accordance with applicable law.
11. NOTICE TO CALIFORNIA RESIDENTS
In addition to the rights detailed in the Your Rights and Choices section of this Policy, residents of California may have additional rights regarding personal information.
If you are a California resident, please read our California Privacy Notice, which supplements this Policy.
12. TRANSFERS
The Services are operated from the United States. If you are located outside of the United States and choose to use the Services or provide information to us, you acknowledge and understand that your information will be transferred, processed, and stored in the United States, as it is necessary to provide the Services and perform the Terms of Service.
13. CHANGES TO THIS PRIVACY POLICY
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. We will make the revised Privacy Policy accessible through use of the Services, so you should review the Privacy Policy periodically. You can know if the Privacy Policy has changed since the last time you reviewed it by checking the “Last Updated” date included at the beginning of the document. If we make a material change to the Policy, we will provide you with notice in accordance with legal requirements. Your use of the Services following any such change constitutes your agreement that all information collected from or about you after the revised Privacy Policy is posted will be subject to the terms of the revised Privacy Policy.
14. CONTACT INFORMATION
If you have any questions or comments about this Privacy Policy, our privacy practices, please contact us at privacy@copilot.money or by writing to us at:
Copilot Money, Inc.
61 Greenpoint Avenue, Suite 313
Brooklyn, NY 11222
