Data Retention & Disposal Policy

Last updated: September 1, 2026

This policy describes what data Juniper Finance retains, for how long, and how it is disposed of. It should be read alongside our Privacy Policy.

Data we retain

• Account & identity: your email address and account record.
• Financial data (via Plaid): an encrypted Plaid access token, and the account, balance, and transaction records synced from the institutions you link. Account numbers are stored only as a last-four mask; full account and routing numbers are never stored.
• Access credentials: salted hashes of the personal access tokens and OAuth connections you create for AI clients (never the tokens themselves), short-lived sign-in codes (hashed), and OAuth authorization artifacts.

We do not store your bank login credentials — Plaid handles bank authentication and we never receive them.

Retention periods

• Financial data & Plaid access tokens: retained while your account is open and the corresponding institution remains connected, so we can keep your data current for you and the AI clients you authorize.
• Account & identity records: retained until you delete your account.
• Personal access tokens / OAuth connections: retained until you revoke them.
• Sign-in codes: deleted on use, and in any case expire within 10 minutes.
• OAuth authorization codes: single-use and expire within 60 seconds; refresh tokens expire within 30 days of last use.

Disposal — how data is removed

• AI-client access (personal access tokens and OAuth connections): you can revoke these yourself at any time on the “Connect your AI” page. Revocation takes effect immediately.
• Linked banks and your account: to disconnect a bank or delete your account, email privacy@davidjiang.com. Upon a verified request we, within 30 days:
  • permanently delete the associated accounts, balances, transactions, and connection records from our database;
  • revoke the corresponding Plaid access token with Plaid, so no further data can be retrieved; and
  • invalidate related access credentials.

Deletion of financial data is permanent and cannot be undone.

Protection during retention

• Plaid access tokens are encrypted at rest (AES-256-GCM).
• Access tokens and sign-in codes are stored only as salted hashes.
• All data is transmitted over HTTPS (TLS).
• Every query is scoped to the owning user; clients read only their own data.

Contact

Questions or deletion requests: privacy@davidjiang.com.