Privacy Policy
Effective date: October 26, 2026
This Privacy Policy explains how Shkor Labs LLC, a Wyoming limited liability company doing business as Shkor Money (“Shkor Money”, “we”, “us”), collects, uses, shares and protects information when you use the Shkor Money website and application (the “Service”). We wrote it to be read, not skimmed past. The short version: we use your data only to show you your own financial picture, we never sell it, and you can delete it at any time.
1. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account information | Email address, password (stored only as a salted scrypt hash), one-time sign-in codes (stored only as keyed hashes, deleted after use) | You |
| Financial account data | Institution name, account name, type, last 4 digits (mask), current and available balances, credit limit | Your financial institution via Plaid |
| Transaction data | Date, amount, merchant/description, category, pending status — up to 24 months of history | Your financial institution via Plaid |
| Liability data | Credit card and loan APR, minimum payment, due date, statement balance | Your financial institution via Plaid |
| Offer requests (optional) | Information you enter to check loan rates (name, address, phone, date of birth, SSN — SSN is passed through and not stored, income, loan amount), ZIP code for savings offers, and the offers returned | You; Engine by MoneyLion |
| Technical data | IP address (for security rate-limiting), session cookie, server logs | Your browser/device |
We do not collect or store your online banking username or password, Social Security number, or full account and routing numbers, and we cannot initiate payments or transfers.
2. How we connect to your bank (Plaid)
We use Plaid Inc. (“Plaid”) to gather your data from financial institutions. By connecting an account, you acknowledge and agree that your information will be treated in accordance with the Plaid End User Privacy Policy, and you grant Shkor Money and Plaid the right, power and authority to access and transmit your information as reasonably necessary for Plaid to provide its services to us. Plaid returns to us an access token that allows read-only retrieval of the data types listed above; we encrypt this token at rest.
3. How we use information
- To provide the Service: display balances and transactions, categorize spending, compute insights such as debt cost, fees, idle cash, recurring charges and debt-to-income;
- To keep the Service secure: authentication and multi-factor verification codes sent to your email, fraud and abuse prevention, rate limiting, audit logs;
- To communicate with you about your account and material changes to the Service or this Policy;
- To comply with law and enforce our Terms.
We do not use your financial data for advertising, and we do not sell, rent or trade personal information. We do not “share” personal information for cross-context behavioral advertising.
4. How we share information
We share information only with:
- Service providers that process data on our behalf under contract and only for providing the Service: Plaid Inc. (bank connectivity), Hetzner Online GmbH (data-center hosting, Helsinki, Finland) and Resend, Inc. (delivery of transactional emails such as verification codes — receives only your email address and the message);
- Legal and safety recipients when required by law, subpoena or court order, or to protect the rights, property or safety of our users or others;
- A successor in a merger, acquisition or sale of assets, subject to this Policy;
- Anyone you direct us to share with, with your explicit consent.
- Engine by MoneyLion (offers). Only when you choose to see offers: for savings offers we share your ZIP code and a deposit amount; for personal-loan offers you enter your name, address, phone, date of birth, Social Security number, income and loan details in a form and authorize a soft credit inquiry, and we pass this information to Engine by MoneyLion (MoneyLion Technologies Inc.) and its network of lenders to return pre-qualified offers. We do not store your Social Security number. We keep the offers returned and a summary of the request (amount, purpose, state). Lenders you choose to apply with handle your data under their own policies. We may be compensated by Engine when you click or are approved for an offer.
- AI agents you connect. If you create an access token in Settings → AI agents and connect an AI assistant (for example Claude, ChatGPT or Cursor) via the Model Context Protocol, that assistant can retrieve your Shkor Money data (summary, accounts, transactions, debts and calculation results) when it calls our read-only tools. This sharing happens at your direction; once retrieved, the data is handled by the assistant’s provider under its own terms and privacy policy. You can see when each token was last used and revoke it at any time.
If we ever offer optional features that introduce you to third-party financial products (for example, a lower-rate card or loan), we will ask for your separate, explicit opt-in before sharing any information with that third party, and you can withdraw that consent at any time.
5. Data retention and deletion
We keep your data while your account is active. You can disconnect an institution in Settings — we revoke the connection with Plaid (/item/remove) and delete that institution’s accounts and transactions. You can delete your account in Settings — we revoke all connections and delete your profile, accounts, transactions and liabilities from our production database immediately; residual copies in encrypted backups are overwritten within 30 days. Demo (sandbox) sessions contain only test data and are purged periodically. Minimal security logs (without financial data) are kept up to 12 months.
6. Your rights and choices
- Access and portability: download your data as JSON from Settings → “Export my data”.
- Deletion: Settings → “Delete account”, or email us.
- Correction: contact us to correct account information.
- Revoke access: disconnect an institution in Settings, or through your bank or Plaid Portal (my.plaid.com).
Residents of California and other U.S. states with consumer privacy laws may have additional rights (to know, delete, correct, and to not be discriminated against for exercising rights). We honor these requests for all users regardless of state. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. Financial information we receive may also be subject to the Gramm-Leach-Bliley Act; we treat it under the safeguards described below.
7. Security
We protect information with TLS encryption in transit, encryption of Plaid access tokens at rest, salted password hashing, HttpOnly/Secure session cookies, least-privilege server access and audit logging. See our Security overview. No method of transmission or storage is 100% secure, but we work to protect your information and will notify you and authorities as required by law in the event of a breach.
8. Children
The Service is intended for individuals 18 and older located in the United States. We do not knowingly collect information from children under 13 (or under 18).
9. International processing
Our servers are located in the European Union (Finland). By using the Service, you understand that your information will be transferred to and processed there, protected by the safeguards in this Policy.
10. Changes
We will post changes here and update the effective date. If a change is material, we will notify you by email or in the app before it takes effect.
11. Contact
Shkor Labs LLC (d/b/a Shkor Money), 1023 E Lincolnway, Cheyenne, WY 82001, USA · WY file no. 2026-002003106 · support@shkor.com