My Figures Legal

Privacy Policy

How we collect, use, share, and protect your personal and financial information, and the choices and rights you have.

Effective date: October 26, 2026

Last updated: October 26, 2026

Privacy at a glance.

  • We use MX Technologies, Inc. (“MX”) to connect your financial accounts. My Figures never sees or stores your bank username or password.

  • We use your financial data to provide the features you use. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

  • You control your connections. You can disconnect an account at any time, and you can ask us to delete the data we’ve retrieved.

  • You can access, correct, download, and delete your information, wherever you live in the United States.

  • We protect your information with encryption in transit and at rest, access controls, and monitoring.

My Figures, Inc. (“My Figures,” “we,” “us,” or “our”) helps small business owners, entrepreneurs, and individuals understand and manage their money. Doing that means handling some of your most sensitive information, and we take that responsibility seriously. This Privacy Policy explains what information we collect, how we use and share it, how we protect it, and the choices and rights you have.

1. Scope and who we are

This Privacy Policy applies to personal information we collect through myfigures.com, the My Figures app at app.myfigures.com and any My Figures mobile apps, My Figures Payments, our learning content and workshops, our email, text message, and chat channels, and any other service that links to this policy (together, the “Services”). My Figures, Inc. is responsible for the personal information described here.

This policy does not cover:

  • Third parties’ own practices. MX, your financial institutions, our payment processing partner Finix, and other third parties handle information under their own privacy policies (see Section 18).

  • Bookkeeping and accounting firms. If you use My Figures through a bookkeeping or accounting firm, the firm’s own privacy notice also applies to how the firm uses your information. We process your information to provide the Services to you and to that firm.

  • Your customers’ information. If you use My Figures Payments or invoicing, you are responsible for giving your own customers any notices the law requires about their information.

If you use the Services for personal, family, or household purposes, some of the information we collect is “nonpublic personal information” under the federal Gramm-Leach-Bliley Act. Our GLBA privacy notice is in Section 14.

This policy is part of our Terms & Conditions.

2. Information we collect

We collect information directly from you, automatically when you use the Services, and from third parties such as MX and your financial institutions.

2.1 Information you give us

  • Account and profile information: name, email address, phone number, password (managed by our authentication provider, Clerk), and profile details. If you sign in with a third-party account such as Google, we receive your name, email address, and profile photo from that service.

  • Business information: business name, legal entity name, industry, role, website, mailing address, and tax identification number (EIN) if you add it to your business settings.

  • Financial information you enter: manual accounts, budgets, savings goals, debts, cash flow plans, tax filing details and deductions, journal entries, notes, categories, rules, and edits to transactions.

  • Documents and files: receipts, statements, invoices, and other files you upload.

  • Invoicing and customer information: information about your customers that you enter to send invoices or accept payments, such as names, email addresses, and amounts.

  • Communications: support requests, chat messages, emails, survey responses, workshop and event registrations, and recordings of calls when we tell you a call is recorded.

  • AI feature inputs: questions you ask our AI features and your chat history.

  • Funding requests: if you ask us to help you explore business funding, the information you provide for that request, such as revenue, time in business, and funding needs.

  • Billing information: your subscription plan and billing details. Card payments are processed by our payment processors. We receive limited information such as card brand, the last four digits, expiration date, and billing address, but not your full card number.

  • Text message consent: your mobile number and a record of your consent, including when and how you opted in.

2.2 Information from MX and your financial institutions

When you connect a financial account, MX retrieves information from your financial institution and provides it to us, including account details, balances, transaction history, investment information, and account holder information. Section 4 explains exactly what MX may retrieve and how it works.

2.3 Information collected automatically

  • Device and usage information: IP address, browser and device type, operating system, device identifiers, pages and screens viewed, features used, clicks, referring URLs, and dates and times of access.

  • Approximate location: general location (such as city or state) inferred from your IP address. We don’t collect precise device location.

  • Session replay and heatmaps: in the app, we use Microsoft Clarity to see how people move through our pages and features so we can find problems and improve the design.

  • Performance and error information: crash reports, error logs, and performance data.

  • Cookies and similar technologies: see Section 7.

2.4 Information from other sources

  • Payment processors: payment status and, for My Figures Payments, onboarding and identity verification results from Finix. Finix collects identity details such as Social Security number, date of birth, and bank account information directly. We receive verification status and account identifiers, not your full Social Security number.

  • Our affiliates: if you came to us through our affiliate, 7 Figures Funding, we may receive your contact and business information from it.

  • Partners and referrers: referral and affiliate partners who refer you to us, such as through the My Figures affiliate program.

  • People who invite you: if an account owner, team member, or bookkeeping firm invites you, we receive your name and email from them.

  • Marketing and customer engagement tools: information you submit through forms and chat on our website, which are powered by our customer engagement platform provider.

2.5 Sensitive information

Some information we process is considered sensitive under certain laws, including financial account information, your My Figures account login, and, for My Figures Payments, government identifiers collected by Finix. We use sensitive information only to provide the Services you request, to keep them secure, and for other purposes the law allows. We don’t use it to infer characteristics about you.

3. How we use information

We use personal information to:

  • Provide the Services: create and manage your account, connect and sync your financial accounts, categorize transactions, and produce dashboards, reports, forecasts, budgets, reconciliations, and tax estimates. We also use it to provide shared access, My Figures Payments, learning content, and AI features.

  • Support and communicate with you: respond to requests, send service messages such as security alerts, billing notices, and policy updates, and send text messages you’ve opted in to.

  • Process payments and subscriptions: bill you, process payments, prevent payment fraud, and keep financial records.

  • Keep the Services safe: verify identity, detect and prevent fraud, unauthorized access, and abuse, and enforce our Terms.

  • Improve the Services: analyze usage, fix bugs, test new features, and improve categorization and other features, using de-identified or aggregated data where practical.

  • Market our own Services: send you news and offers about My Figures by email, and by text if you’ve opted in, and measure how well our website and campaigns work. We don’t use information retrieved from your Connected Accounts to market third-party products to you unless you ask us to, for example when you request funding options.

  • Meet legal obligations: comply with laws and legal process, keep required records, and establish or defend legal claims.

  • Do other things you ask or agree to.

De-identified data. When we de-identify information, we keep it in de-identified form, take reasonable steps to make sure it can’t be linked back to you, and don’t try to re-identify it.

4. Connecting financial accounts through MX

4.1 Who MX is and what you authorize

My Figures uses MX Technologies, Inc. (“MX”), a financial data aggregation provider, to connect your bank, credit card, loan, investment, and other financial accounts (“Connected Accounts”). When you connect an account, you authorize My Figures and MX to access, retrieve, and store information from your financial institution so we can provide the Services. The authorization is described in full in Section 9 of our Terms.

4.2 What MX may retrieve

Depending on your institution and account type, MX may retrieve and provide to us:

  • Account details: institution name, account name, type, and status, masked account numbers, and, where available, full account and routing numbers;

  • Balances and terms: current and available balances, credit limits, loan balances, interest rates, payment due dates, minimum payments, and payoff amounts;

  • Transaction history: dates, amounts, descriptions, merchant names and locations, categories, memos, check numbers, and pending or posted status;

  • Investment information: holdings, values, and investment transactions;

  • Account holder information: name, address, email address, and phone number on file with your institution; and

  • Connection information: connection status, error codes, timestamps, and identifiers MX uses to manage the connection.

Connected Accounts are refreshed automatically on a regular schedule until you disconnect them.

4.3 How your login credentials are handled

You enter your financial institution credentials directly into MX’s secure connection window, or, where your institution supports it, on your institution’s own website through an OAuth or other token-based connection. With token-based connections, your institution gives MX a secure token instead of your password. For institutions without token-based access, MX stores your credentials in encrypted form to maintain the connection. My Figures never receives, sees, or stores your financial institution username, password, or security answers.

4.4 How we use MX data

We use information from your Connected Accounts only to provide, support, secure, and improve the Services you use, and to comply with the law. We don’t sell it, we don’t use it for targeted advertising, and we don’t share it with third parties for their own marketing. If you edit information in the Services, such as a transaction description, we may send that change back to MX to keep your records in sync.

4.5 MX’s own policies

MX processes your information to provide its services to us and to you, under its agreement with us and its own privacy practices. MX describes its practices in the MX Privacy Statement and the MX Terms of Use, and you can reach MX’s policies from the “Data access powered by MX” link in the connection window. We require MX by contract to protect your information.

4.6 Disconnecting accounts and revoking access

You can disconnect any Connected Account at any time on the Connections page in the app or by contacting support@myfigures.com. You can also revoke access through your financial institution’s “connected apps” or “third-party access” settings, if it offers them.

When you disconnect an account:

  • we and MX stop retrieving new information from that account;

  • information already retrieved stays in your My Figures account as part of your financial history, so your reports and books stay accurate, until you delete it or close your account;

  • you can ask us to delete previously retrieved information from a disconnected account, and we will delete it within 30 days unless we’re required by law to keep it; and

  • MX may keep information under its own retention policies and legal obligations.

When you close your My Figures account, we disconnect your Connected Accounts, ask MX to delete your connection, and delete or de-identify your financial account information as described in Section 9.

5. How we share information

We share personal information only as described below.

  • With MX. We share the information MX needs to set up and maintain your connections, such as your user identifier, email address, and connection requests.

  • With your financial institutions. Through MX, we share the information needed to authenticate and retrieve your data. Your financial institution may learn that you connected its accounts to My Figures.

  • With service providers. We use companies that act on our behalf, under contracts that limit how they can use your information. They include:

    • cloud hosting, database, and infrastructure providers (such as Vercel, Convex, and Trigger.dev);

    • authentication and identity providers (such as Clerk);

    • payment processors (such as Stripe for subscriptions and Finix for My Figures Payments);

    • AI technology providers (such as Anthropic), which process the information needed to generate AI insights, reports, and chat responses;

    • analytics and product experience tools (such as Google Analytics, Microsoft Clarity, Vercel Web Analytics, Framer, and Userflow);

    • communication, customer engagement, and CRM platforms that power our email, text messages, website chat, and forms (such as LeadConnector and Zoho CRM);

    • workflow automation tools (such as Make.com); and

    • professional advisers, such as lawyers, accountants, and auditors.

  • With people you authorize. Team members, accountants, bookkeepers, advisors, and bookkeeping firms you give access to can see information in your workspace according to their permissions. We also send information wherever you direct, such as to webhook or API destinations you set up or to people you share reports with.

  • With our affiliates. My Figures is affiliated with 7 Figures Funding. We share information with our affiliates for everyday business purposes such as customer support, operations, and security, and when you ask us to connect you with funding options. We don’t let affiliates use information retrieved from your Connected Accounts to market to you.

  • With funding and financial partners at your direction. If you ask to explore funding, payroll, credit, or other financial products, or click through to a partner’s application, we share the information needed for that request, such as your contact and business details. The partner’s own privacy policy then applies.

  • For legal and safety reasons. We may disclose information to comply with law, regulation, subpoenas, or court orders. We may also disclose it to respond to lawful requests from government authorities, to protect the rights, property, and safety of our users, the public, or My Figures, and to detect and prevent fraud, including in cooperation with MX and financial institutions.

  • In business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to this policy’s protections.

  • With your consent. We may share information for other purposes when you ask us to or agree.

  • De-identified and aggregated data. We may share information that has been de-identified or aggregated so that it doesn’t identify you or your business.

6. We don’t sell your data or use it for targeted advertising

My Figures does not sell your personal information, and we do not share it for cross-context behavioral advertising (also called targeted advertising). We have not done so in the past 12 months. We don’t use information from your Connected Accounts for advertising, and we don’t knowingly sell or share the personal information of anyone under 16.

The analytics tools we use are configured for analytics, not advertising. If we ever change this, we will update this policy first, tell you, and give you a way to opt out, or ask for your consent where the law requires.

7. Cookies and similar technologies

Cookies are small files stored on your device. We also use similar technologies such as local storage, pixels, and software development kits. We use them for these purposes:

  • Strictly necessary: to sign you in, keep your session secure, prevent fraud, and remember your cookie choices. These can’t be turned off.

  • Preferences: to remember settings such as your theme, language, and recent views.

  • Analytics and performance: to understand how the website and app are used, measure performance, and fix problems.

  • Support and engagement: to power website chat and in-app onboarding guides.

We don’t use advertising cookies.

Clerk

What it does: Sign-in and session security (strictly necessary)

Where: App

Google Analytics

What it does: Website and app usage analytics

Where: Website and app

Microsoft Clarity

What it does: Heatmaps and session replay

Where: App

Vercel Web Analytics and Speed Insights

What it does: Privacy-friendly page view and performance measurement

Where: App

Framer

What it does: Website hosting and basic site analytics

Where: Website

LeadConnector

What it does: Website chat widget and forms

Where: Website and app help pages

Userflow

What it does: In-app onboarding guides

Where: App

Your choices. You can block or delete cookies in your browser settings, though some features may not work without them. To opt out of Google Analytics across sites, you can use Google’s opt-out browser add-on. We honor Global Privacy Control signals as described in Section 17.

Email. Our marketing emails may contain pixels that tell us whether a message was opened. You can block them by turning off automatic image loading in your email app.

8. Text messages

If you opt in to text messages, we collect your mobile number and a record of your consent and use them to send the messages you’ve agreed to receive. We don’t sell your mobile number, and we don’t share your mobile number or text message opt-in consent with third parties or affiliates for their marketing. We share them only with the messaging providers and carriers that deliver our messages. Reply STOP to opt out or HELP for help. Our SMS terms have the details.

9. How long we keep information

We keep personal information only as long as we need it for the purposes described in this policy, including to provide the Services, comply with legal, tax, and accounting obligations, resolve disputes, prevent fraud, and enforce our agreements. When we no longer need it, we delete it or de-identify it.

Account and profile information

How long we keep it: While your account is open, then deleted or de-identified within 90 days after you close it

Financial account data from Connected Accounts

How long we keep it: While your account is open. After you disconnect an account, retained as part of your history until you delete it or close your account. Deleted or de-identified within 90 days after you close your account

Documents and files you upload

How long we keep it: Until you delete them, or within 90 days after you close your account

AI chat history and AI-generated insights

How long we keep it: Until you delete them, or within 90 days after you close your account

Billing and subscription records

How long we keep it: 7 years, to meet tax and accounting requirements

My Figures Payments records

How long we keep it: As long as required by law and card network rules

Support communications

How long we keep it: 3 years after the request is resolved

Text message consent and opt-out records

How long we keep it: 5 years after our last message to you

Website and app analytics

How long we keep it: Up to 14 months

Security and audit logs

How long we keep it: Up to 2 years

Backups

How long we keep it: Kept only for disaster recovery and deleted on a rolling basis

We may keep information longer when the law requires it, to resolve a dispute, or to comply with a legal hold. De-identified and aggregated data may be kept indefinitely. Where the CFPB’s personal financial data rights rule applies, we also follow the retention limits described in Section 14.2.

10. How we protect information

We use administrative, technical, and physical safeguards designed to protect your information, including:

  • Encryption of data in transit using TLS and of data at rest using industry-standard encryption through our infrastructure providers;

  • Access controls that limit access to customer information to the people who need it to do their jobs;

  • No storage of bank credentials. Bank login credentials are handled by MX or your financial institution, never by My Figures;

  • Careful vendor selection, choosing providers with strong security practices and requiring them by contract to protect your information;

  • Secure development practices and monitoring of our systems;

  • Confidentiality obligations for everyone who works with customer information; and

  • U.S. data storage. Customer data is stored in data centers in the United States.

No system is completely secure, and we can’t guarantee the security of your information. You can help by using a strong, unique password, turning on multi-factor authentication, and never sharing your login. We will never ask for your bank username or password. To report a security vulnerability, email support@myfigures.com.

11. Data breach notification

We maintain an incident response plan to investigate, contain, and fix security incidents. If a breach affects your personal information, we will:

  • notify you without unreasonable delay and within the time required by applicable law, by email, in-app notice, or mail. We’ll tell you what happened, what information was involved, what we’re doing, and what you can do to protect yourself;

  • notify regulators as required by law, including state attorneys general and the Federal Trade Commission, which requires notice within 30 days after discovery for incidents involving unencrypted information of 500 or more consumers; and

  • coordinate with MX, financial institutions, and other partners as required by law and our contracts. If an incident involves a service provider’s systems, we’ll work with that provider, and it may notify you directly.

12. Your privacy rights and choices

12.1 Rights for all U.S. users

Wherever you live in the United States, you can ask us to:

  • Access the personal information we hold about you and learn how we use and share it;

  • Get a copy of your information in a portable format;

  • Correct inaccurate information;

  • Delete your information;

  • Opt out of any sale, sharing for targeted advertising, or profiling. We don’t do any of these, but you can still submit a request and we will record it; and

  • Appeal our decision on your request.

You can also stop marketing emails with the unsubscribe link, stop text messages by replying STOP, disconnect Connected Accounts at any time, and withdraw consent you’ve given us.

12.2 Controls in the app

In the app, you can update your profile, disconnect accounts on the Connections page, export reports, and close your account. For anything else, contact us.

12.3 How to make a request

Email support@myfigures.com with the subject “Privacy Request,” or call (385) 350-8511. To protect you, we’ll verify your identity, usually by confirming the request comes from the email address on your account. We may ask for more information if needed. We will never ask for your bank password.

Authorized agents. You may use an authorized agent to make a request for you. We may ask the agent for proof of your signed permission, and we may ask you to verify your identity directly.

Timing. We will confirm receipt within 10 business days and respond within 45 days. If we need more time, we may extend that by up to 45 more days and will tell you why.

Exceptions. We may keep some information when the law requires or allows it, for example to complete a transaction, keep records required by tax or financial laws, detect fraud, protect security, or resolve disputes. Some laws exempt information covered by the Gramm-Leach-Bliley Act. If we can’t fully meet a request, we’ll tell you why.

No discrimination. We won’t discriminate against you for exercising your privacy rights.

12.4 Appeals

If we deny your request, you can appeal by replying to our decision with the subject “Privacy Appeal” within 45 days. We will respond within the time required by law, generally 45 to 60 days, and explain our decision. If your appeal is denied, you may contact your state attorney general.

13. U.S. state privacy disclosures

13.1 California

This section supplements the rest of this policy for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA). California residents have the rights described in Section 12, including the rights to know, delete, correct, and opt out of sale or sharing, and the right not to be discriminated against for using them.

In the past 12 months we have collected the following categories of personal information:

Identifiers

Examples: Name, email, phone, mailing address, account ID, IP address, device identifiers

Sources: You, automatically, service providers, affiliates

Disclosed for business purposes to: Service providers, MX, payment processors, people you authorize

Sold or shared? No

Customer records (Cal. Civ. Code § 1798.80(e))

Examples: Name, address, phone, bank account and routing numbers, other financial information, EIN

Sources: You, MX, financial institutions, Finix

Disclosed for business purposes to: Service providers, MX, payment processors, people you authorize

Sold or shared? No

Commercial information

Examples: Subscription plan, purchase history, invoices and payments you process, transaction history

Sources: You, MX, financial institutions, payment processors

Disclosed for business purposes to: Service providers, payment processors, people you authorize

Sold or shared? No

Internet or other electronic network activity

Examples: Pages viewed, features used, clicks, session replays

Sources: Automatically

Disclosed for business purposes to: Analytics and hosting service providers

Sold or shared? No

Approximate geolocation

Examples: City or state from IP address, merchant locations in transaction data

Sources: Automatically, MX

Disclosed for business purposes to: Service providers

Sold or shared? No

Audio, electronic, or similar information

Examples: Chat transcripts, emails, call recordings when disclosed

Sources: You

Disclosed for business purposes to: Communication service providers

Sold or shared? No

Professional or business information

Examples: Business name, role, industry

Sources: You, affiliates

Disclosed for business purposes to: Service providers, people you authorize

Sold or shared? No

Inferences

Examples: Spending categories, cash flow forecasts, financial health scores, AI-generated insights

Sources: Derived from other information

Disclosed for business purposes to: Service providers, people you authorize

Sold or shared? No

Sensitive personal information

Examples: My Figures account login, financial account information, government identifiers collected by Finix for Payments

Sources: You, MX, Finix

Disclosed for business purposes to: Service providers, MX, payment processors

Sold or shared? No

We don’t collect biometric information, health information, or information about protected classifications such as race or religion.

  • Purposes. We collect and use each category for the purposes in Section 3. We keep each category for the periods in Section 9.

  • Sensitive personal information. We use and disclose sensitive personal information only for purposes the CCPA permits without offering a right to limit, such as providing the Services you request, security, and fraud prevention.

  • No sale or sharing. We don’t sell or share personal information, and we haven’t in the past 12 months. We don’t knowingly sell or share the personal information of consumers under 16.

  • Financial information laws. Information covered by the Gramm-Leach-Bliley Act or the California Financial Information Privacy Act is partly exempt from the CCPA. We describe it here for transparency and honor requests about it where we can.

  • Shine the Light. We don’t share personal information with third parties for their own direct marketing purposes.

13.2 Other states

Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island, have rights to access, correct, delete, and get a copy of their personal data, to opt out of targeted advertising, sale, and certain profiling, and to appeal our decisions. We extend these rights to all U.S. users as described in Section 12.

  • No targeted advertising, sale, or profiling. We don’t process personal data for targeted advertising, sell it, or use it for profiling that produces legal or similarly significant effects.

  • Sensitive data. Where state law treats information we process as sensitive data requiring consent, we get your consent before processing it, for example through the consent you give when you connect an account.

  • Appeals. You can appeal any decision as described in Section 12.4. If we deny your appeal, you can contact your state attorney general.

  • Nevada. We don’t sell covered information as defined under Nevada law. Nevada residents may still submit an opt-out request to support@myfigures.com.

Some of these laws don’t apply to information covered by the Gramm-Leach-Bliley Act, or to businesses below certain size thresholds. We honor the rights above for all U.S. users anyway.

14. Financial privacy laws: GLBA and CFPB Section 1033

14.1 Gramm-Leach-Bliley Act privacy notice

The Gramm-Leach-Bliley Act (GLBA) gives consumers rights over how financial companies share their nonpublic personal information. This notice applies if you use My Figures for personal, family, or household purposes. Financial companies choose how they share personal information. Here is how My Figures shares it:

For our everyday business purposes, such as to provide the Services, process your transactions, maintain your account, and respond to court orders and legal investigations

Does My Figures share? Yes

Can you limit this sharing? No

For our marketing purposes, to offer our own products and services to you

Does My Figures share? Yes

Can you limit this sharing? No, but you can opt out of marketing emails and texts at any time

For joint marketing with other financial companies

Does My Figures share? No

Can you limit this sharing? We don’t share

For our affiliates’ everyday business purposes: information about your transactions and experiences

Does My Figures share? No

Can you limit this sharing? We don’t share

For our affiliates’ everyday business purposes: information about your creditworthiness

Does My Figures share? No

Can you limit this sharing? We don’t share

For our affiliates to market to you

Does My Figures share? No

Can you limit this sharing? We don’t share

For nonaffiliates to market to you

Does My Figures share? No

Can you limit this sharing? We don’t share

We share nonpublic personal information with nonaffiliated companies only as the GLBA permits, such as with service providers that help us operate, with MX and financial institutions to provide the Services, at your direction, or as required by law. Because we don’t share information in ways that federal law lets you opt out of, there is nothing to opt out of. State laws, such as those in California and Vermont, may give you additional rights. We protect nonpublic personal information under the safeguards described in Section 10. If our sharing practices change, we will tell you before the changes take effect.

14.2 CFPB personal financial data rights rule (Section 1033)

The Consumer Financial Protection Bureau issued a rule under Section 1033 of the Dodd-Frank Act (12 C.F.R. part 1033) that governs how companies like My Figures access consumer financial data from banks and other data providers with the consumer’s authorization. The CFPB has been reconsidering the rule, and its requirements and compliance dates may change. To the extent the rule applies to us, we will comply with it. Regardless of the rule’s status, when you connect a personal account, we follow these practices:

  • Limited use. We collect, use, and keep your covered financial data only as reasonably necessary to provide the Services you requested, and for purposes such as preventing fraud, complying with the law, servicing your account, and improving the Services.

  • No secondary uses. We don’t sell your covered data, use it for targeted advertising, or use it to cross-sell other products to you.

  • Easy revocation. You can revoke your authorization at any time, free of charge, by disconnecting the account in the app or by contacting us.

  • When authorization ends. When you revoke your authorization, or when it expires, we stop collecting data from that account. We stop using or keeping previously collected data unless keeping it is reasonably necessary to continue providing Services you still use, such as your historical reports and bookkeeping records, or is required by law. Where the rule requires, we will ask you to reauthorize your connections at least once a year.

  • Accuracy and security. We maintain reasonable procedures to keep your data accurate and protect it with the safeguards described in Section 10, and we require MX to follow the same limits.

15. Children’s privacy

The Services are for adults 18 and older and are not directed to children. We don’t knowingly collect personal information from children under 13, as defined by the Children’s Online Privacy Protection Act (COPPA), or from anyone under 18. If we learn that we have collected personal information from a child, we will delete it. If you believe a child has given us personal information, contact us at support@myfigures.com.

16. International users and data transfers

The Services are intended for people and businesses in the United States, and we store and process information in the United States. If you visit our website or contact us from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those where you live.

European Economic Area, United Kingdom, and Switzerland. If you’re in one of these regions, for example as a website visitor or prospective customer, My Figures, Inc. is the controller of your personal information, and these terms also apply:

  • Legal bases. We process your information to perform our contract with you (to provide the Services), for our legitimate interests (such as securing, improving, and marketing the Services, as long as your rights don’t override those interests), with your consent (such as for non-essential cookies and marketing where consent is required, which you can withdraw at any time), and to comply with legal obligations.

  • Your rights. You can ask to access, correct, delete, restrict, or receive a copy of your information, and you can object to processing based on legitimate interests. You can always object to direct marketing. You may also complain to your local data protection authority, or in the UK to the Information Commissioner’s Office.

  • Transfers. Where required, we use appropriate safeguards for international transfers, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.

17. Do Not Track and Global Privacy Control

Global Privacy Control (GPC). We treat a GPC signal from your browser as a valid request to opt out of the sale or sharing of personal information and targeted advertising for that browser. If you’re signed in, we also apply it to your account. Where our cookie tool supports it, we also use the signal to turn off non-essential cookies. Because we don’t sell or share personal information, GPC doesn’t change how we handle your data, but we honor it.

Do Not Track (DNT). There is no common industry standard for responding to DNT signals, so our Services don’t respond to them differently. Because we don’t track you across other companies’ websites for advertising, DNT wouldn’t change our practices.

18. Third-party sites and services

The Services link to and work with third-party services, including MX, your financial institutions, Finix, Stripe, funding and financial partners, and social media platforms. Their privacy practices are governed by their own policies, not this one, so please review them. If you interact with us on social media, information you post may be public, and the platform’s privacy policy applies.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy here and change the “Last updated” date. If a change is material, we will notify you at least 30 days before it takes effect by email or a notice in the Services. If we want to use personal information we’ve already collected in a materially different way, we will ask for your consent where the law requires. Earlier versions are available on request.

20. Contact us

If you have questions, requests, or concerns about privacy, contact us:

My Figures, Inc.
Attn: Privacy
915 S 500 E, Suite 100
American Fork, UT 84003

Email: support@myfigures.com
Phone: (385) 350-8511 (Monday to Friday, 9:00 a.m. to 5:00 p.m. Mountain Time)
Website: myfigures.com