Privacy Policy

Last updated: September 1, 2026

Juniper Finance (“Juniper,” “we,” “us”) lets you connect your financial accounts and expose that data read-only to AI assistants and other software clients that you authorize, through a Model Context Protocol (MCP) server. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

• Account information you provide: your email address, used to create your account and send one-time sign-in codes.
• Financial data via Plaid: when you link a bank through Plaid, we receive and store account details (names, types, masked numbers), balances, and transactions. If you enable additional permissions, this may include identity, investments, or liabilities data. We store a Plaid access token so we can keep your data current.
• Access credentials you create: personal access tokens and OAuth authorizations you generate to connect AI clients. We store only salted hashes of tokens, never the tokens themselves.
• Minimal technical data: a signed session cookie to keep you logged in. We do not use third-party advertising or analytics trackers.

How we use your information

• To display your accounts, balances, and transactions to you.
• To expose your financial data, read-only, to the MCP clients you explicitly authorize — and only to those clients, at your direction.
• To send you one-time sign-in codes.

We do not sell your data, use it for advertising, or share it for anyone else’s marketing.

Plaid

We use Plaid Inc. to connect to your financial institutions. When you link an account, you interact with Plaid directly, and Plaid collects and processes your information under its own privacy policy. By using Juniper you also agree to Plaid’s End User Privacy Policy. Juniper never sees or stores your bank login credentials — Plaid handles authentication.

How your information is shared

• With clients you authorize: your data is sent to AI or software clients only when you connect them with a token or OAuth authorization you created. You can revoke any of these at any time.
• Service providers: we host the service on Amazon Web Services and send sign-in emails through Resend. These providers process data on our behalf.
• Legal: we may disclose information if required by law or to protect our rights and users’ safety.

How we protect your data

• Plaid access tokens are encrypted at rest (AES-256-GCM).
• Access tokens are stored only as salted hashes.
• All traffic is served over HTTPS (TLS).
• Every query is isolated to your account — clients can only ever read your own data.
• Juniper is strictly read-only: no feature can move money or modify your accounts.

Data retention and your choices

• Revoke any personal access token or OAuth connection from the “Connect your AI” page.
• Disconnect a linked bank to stop syncing its data.
• Request deletion of your account and all associated financial data by contacting us. We will delete it and revoke the corresponding Plaid access.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact

Questions or deletion requests: privacy@davidjiang.com.