This Privacy Policy explains how Dime collects, uses, shares, and protects information when you visit our website, join our waitlist, create an account, connect financial accounts, contact us, or use Dime's products and services.
Dime is registered in Utah and is operated from the United States.
This is a draft policy. Before publishing, Dime should confirm the exact vendors, retention periods, privacy contact address, AI data-use terms, and whether any state, federal financial privacy, or international privacy laws apply.
Data Flow Summary
| Activity | Information involved | Why we use it | Who may receive it | Choices and retention |
|---|---|---|---|---|
| Visiting the website | IP address, browser and device data, pages viewed, referral source, cookies or similar identifiers | Operate the site, understand usage, improve performance, protect against abuse | Hosting providers, analytics providers, security and error-monitoring providers | You can control cookies through your browser or any cookie controls we provide. Site logs are kept for a limited period unless needed for security, fraud prevention, or legal reasons. |
| Joining the waitlist or email list | Name, email address, phone number if requested, signup source, communication preferences | Send updates, manage waitlist access, understand demand, prevent abuse | Email, CRM, database, hosting, and analytics providers | You can unsubscribe from marketing emails or ask us to delete your waitlist information, subject to legal and security needs. |
| Creating or using an account | Account identifiers, login information, authentication metadata, profile settings, preferences, support history | Provide access, personalize Dime, secure accounts, provide support, enforce terms | Authentication providers, hosting and database providers, support tools, security providers | You may request access, correction, or deletion of account information. Some records may be retained as needed for security, legal compliance, fraud prevention, or dispute resolution. |
| Connecting financial accounts | Account identifiers and metadata, balances, transactions and transaction history, merchant and category information, institution information, connection and authorization metadata, and device or network information used during connection | Authenticate and maintain the connection, retrieve the data you authorize, provide Dime's monitoring and insight features, prevent fraud, and maintain reliability | Plaid, the financial institutions and accounts you choose, Dime's hosting and security providers, and limited infrastructure providers needed to provide Dime | Connecting is optional. Plaid Link presents its consent pane before accounts are linked. You can disconnect accounts through Dime and may manage Plaid connections or request deletion through Plaid Portal, subject to legal, security, fraud-prevention, support, and de-identification exceptions. |
| Using Ask Dime or AI features | Your prompts, Dime responses, relevant financial facts or summaries, derived artifacts, citations, safety and verification metadata | Answer your questions, verify facts, improve product quality, debug issues, prevent unsafe or unsupported outputs | AI service providers, hosting and database providers, security and monitoring providers | Dime should confirm whether prompts and responses are retained, for how long, and whether AI vendors are prohibited from training on customer data. |
| Contacting support | Contact details, message contents, attachments you provide, support metadata | Respond to requests, troubleshoot issues, maintain records, improve service | Support tools, email providers, hosting providers, security providers | Support records are retained as needed to respond to you, maintain business records, protect users, and comply with law. |
| Payments, if offered | Billing contact details, subscription status, payment metadata, fraud signals | Process payments, manage subscriptions, prevent fraud, comply with tax and accounting rules | Payment processors, accounting providers, fraud-prevention providers | Dime should avoid storing full payment card numbers directly if a payment processor can handle them. Payment records may be retained for tax, accounting, fraud-prevention, and legal reasons. |
| Security and fraud prevention | IP addresses, authentication events, device data, abuse signals, audit logs | Protect Dime, users, accounts, and financial information | Hosting providers, authentication providers, security providers, legal authorities where required | Security logs may be retained longer than ordinary website logs when needed to investigate abuse, fraud, or unauthorized access. |
Information We Collect
We collect information in the following ways.
Information You Provide
You may provide information when you join a waitlist, request access, create an account, contact support, respond to surveys, sign up for updates, or otherwise communicate with us. This may include your name, email address, phone number, account credentials or authentication information, preferences, support messages, and any other information you choose to provide.
Financial Information
If you choose to connect a financial account, Dime receives financial account information through Plaid. Depending on the accounts you select and the Plaid products used to support Dime, this may include account names and identifiers, account types, balances, transactions and transaction history, merchant information, transaction dates and amounts, categories, institution information, and connection or authorization metadata.
Dime uses this information to provide personal finance features, answer questions about your spending and accounts, identify patterns, and maintain the reliability and security of the service. Dime should not publish this policy until the team confirms exactly what financial data is stored, what is derived from it, and what happens after an account is disconnected.
Plaid and Financial Account Connections
Dime uses Plaid Inc. ("Plaid") to let you connect financial accounts and share the financial data you authorize with Dime. Plaid is a separate company with its own data practices. Plaid's collection, use, sharing, retention, and protection of information are governed by Plaid's End User Privacy Policy. This Privacy Policy describes Dime's practices after Dime receives information from Plaid.
Information Plaid May Collect
The information Plaid collects depends on the financial institutions, accounts, data scopes, and Plaid products involved in your connection. Plaid may collect:
- Information you provide to Plaid, such as your name, email address, phone number, and authentication information needed by your financial institution, including usernames, passwords, security tokens, security questions, and one-time passcodes.
- Information from the financial institutions and accounts you choose to connect, such as account and routing information, account type, balances, transactions and transaction history, account-holder information, and other financial information available through the applicable connection.
- Information about the device and network you use to access Plaid, such as IP address, device identifiers, browser information, and electronic network activity.
- Information from Dime about the connection and requested use, such as the Dime service you are using, the data scopes requested, and connection status or metadata.
- Information from Plaid affiliates, service providers, identity-verification providers, and fraud-prevention providers where needed to provide, secure, support, or improve Plaid's services.
- Inferences or financial insights derived from information available through the Plaid products used for your connection.
Dime does not receive the credentials you enter directly into Plaid Link. Dime does not ask you to send bank login credentials to Dime outside Plaid Link.
How Plaid May Use and Share Information
Plaid may use information to authenticate and maintain financial account connections; access and transmit data you authorize; provide, operate, support, secure, and improve its products; prevent fraud, misuse, and unauthorized activity; comply with law; respond to support requests; and provide Plaid products or services you request. Depending on the Plaid product, Plaid may derive inferences or financial insights from the information it processes.
Plaid may share information with Dime as you direct; with the financial institutions you connect; with Plaid's affiliates, processors, service providers, partners, agents, and contractors; to comply with law or enforce agreements; to address fraud, security, or misuse; and in other circumstances described in Plaid's End User Privacy Policy or when you consent. Plaid states that it shares personal financial data to power requested services, when a user consents, or to protect against fraud, unauthorized transactions, claims, malicious activity, and related privacy or security risks.
Your Authorization and Consent
Connecting a financial account is optional. Visiting Dime's website, joining the waitlist, or creating a Dime account does not authorize Dime or Plaid to access your financial accounts.
When you initiate an account connection, Plaid Link presents a consent pane before any account is linked. That flow identifies Plaid, the connection purpose, and the data or permissions requested. By affirmatively choosing to continue in Plaid Link, authenticating with your financial institution, and selecting the accounts and data you want to share, you direct and authorize Plaid to access, collect, use, and share that information with Dime for the purposes shown in the connection flow and described in Plaid's End User Privacy Policy. You also authorize Dime to receive and use the information for the Dime features you requested, as described in this Privacy Policy.
You may decline by leaving the connection flow before completing it. Dime will not treat a preselected control, silence, or inactivity as consent. If Dime requests a materially different Plaid product, data scope, or use later, Dime or Plaid will present an additional authorization or consent flow when required.
Managing or Ending a Plaid Connection
You can disconnect a linked financial account through Dime where that control is available. U.S. users may also use Plaid Portal to view and manage connections made through Plaid, see types of data shared with connected apps, disconnect accounts, or request deletion from Plaid.
Disconnecting stops future access through that connection but may not immediately delete every copy of previously received information. Dime and Plaid may retain information as described in their respective retention policies, including where needed for an active connection or requested service, legal compliance, security, fraud prevention, support, dispute resolution, or where information has been aggregated, de-identified, or anonymized so it cannot reasonably identify you.
Prompts, Responses, and AI-Related Information
When you use Ask Dime or other AI-assisted features, we may collect your prompts, the responses generated by Dime, relevant context used to answer your request, citations or evidence used to support an answer, and safety, verification, or debugging metadata.
Dime's goal is to provide answers from verified financial facts, explicit preferences, maintained external facts, and deterministic calculations. Before publishing this policy, Dime should confirm which AI providers process customer information, whether data is used to train provider models, and what redaction or minimization controls apply.
Information Collected Automatically
When you use our website or service, we may automatically collect technical information such as IP address, browser type, device type, operating system, pages viewed, referring pages, timestamps, cookie identifiers, authentication events, crash reports, and similar usage or diagnostic data.
Information From Service Providers and Partners
We may receive information from service providers and partners that help us operate Dime, such as authentication providers, financial data providers, payment processors, analytics tools, email providers, support tools, security tools, and hosting providers.
How We Use Information
We use information to:
- Provide, operate, maintain, and improve Dime.
- Create and manage accounts.
- Connect financial accounts and display financial information.
- Answer user questions and generate financial insights.
- Personalize product experiences based on user preferences and account context.
- Send service, security, waitlist, product, and marketing communications.
- Respond to support requests and troubleshoot problems.
- Analyze website and product usage.
- Monitor performance, diagnose errors, and improve reliability.
- Protect against fraud, abuse, unauthorized access, and security incidents.
- Enforce our terms and protect the rights, safety, and security of Dime, users, and others.
- Comply with legal, regulatory, tax, accounting, and reporting obligations.
We do not use financial information to make autonomous financial decisions for you. Dime may provide information, analysis, and suggestions, but users remain responsible for their own financial decisions.
Cookies and Analytics
We may use cookies, pixels, local storage, and similar technologies to operate the website, remember preferences, measure traffic, understand how users interact with Dime, improve performance, and protect against abuse.
Some cookies are necessary for the website or service to work. Others may support analytics or marketing, if enabled. You can usually control cookies through your browser settings. If Dime uses a cookie banner or consent manager, that tool should describe the available choices.
Before publishing, Dime should confirm the analytics, advertising, and cookie tools actually in use and whether any of them involve targeted advertising, cross-context behavioral advertising, or sale/share activity under applicable privacy laws.
How We Share Information
We may share information with:
- Service providers that host, operate, secure, analyze, support, or improve Dime.
- Plaid, which helps connect financial accounts, authenticate connections, retrieve the data you authorize, prevent fraud, and provide related connection services as described in the Plaid section above.
- Authentication providers that help manage login and account security.
- AI and infrastructure providers that help process user requests and generate Dime responses.
- Email, CRM, support, and communication tools that help us contact users and respond to requests.
- Payment processors and accounting providers if Dime offers paid products.
- Security, fraud-prevention, and error-monitoring providers.
- Professional advisors, such as lawyers, auditors, accountants, and insurers.
- Government authorities, regulators, courts, or other parties when required by law or necessary to protect rights, safety, and security.
- Parties involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate protections.
- Other parties when you direct us to share information or give us consent.
We do not sell personal information in the ordinary sense of exchanging it for money. Before publishing, Dime should confirm whether any analytics, marketing, advertising, or tracking activity could count as a "sale," "share," targeted advertising, or profiling under California, Colorado, or other applicable privacy laws.
Financial Data, AI, and Sensitive Information
Financial information can be sensitive. Dime should design its systems so that service providers and AI tools receive only the information needed to provide the service, with appropriate redaction, access controls, retention limits, and contractual protections.
Dime should not claim that it "never shares" financial information unless that is literally true across all providers and subprocessors. A more accurate promise is that Dime limits sharing to what is needed to provide, secure, support, and improve the service, comply with law, and honor user choices.
Data Retention
We keep information for as long as reasonably necessary to provide Dime, maintain accounts, respond to requests, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, protect security, and maintain business records.
Retention periods may vary depending on the type of information and why it was collected. For example:
- Waitlist and marketing information may be kept until you unsubscribe, request deletion, or the information is no longer needed.
- Account information may be kept while your account is active.
- Financial account and transaction information may be kept while needed to provide Dime and for a limited period afterward for backup, security, legal, or dispute-resolution purposes.
- Support records may be kept to maintain a history of requests and resolutions.
- Security logs may be kept for longer periods when needed to investigate fraud, abuse, or unauthorized access.
- Payment records may be kept as required for tax, accounting, fraud-prevention, and legal obligations.
When information is deleted, it may take additional time to remove it from backups and disaster-recovery systems.
Plaid maintains its own retention and deletion practices. Plaid states that it retains data only as long as needed for the purpose for which it was collected and any legal requirements. When a connection to an app is removed, Plaid states that its systems are designed to automatically delete personal data, subject to exceptions such as another active Plaid connection, a Plaid product or service you requested, legal obligations, fraud prevention, privacy or security, support, investigations, de-identified data, or your specific agreement to longer retention. See Plaid's End User Privacy Policy for current details.
Before publishing, Dime should replace this general retention description with specific retention periods where possible.
Security
We use administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, encryption, logging, monitoring, vendor review, and internal policies designed to limit access to personal information.
No system is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed without authorization.
Because Dime handles financial information, Dime should review whether financial privacy, safeguards, breach-notification, or other security obligations apply, including obligations under federal or state law.
Your Privacy Choices
Depending on where you live and how you use Dime, you may have choices or rights regarding your personal information. These may include the right to:
- Access personal information we have about you.
- Correct inaccurate personal information.
- Delete personal information.
- Receive a copy of personal information in a portable format.
- Opt out of marketing emails.
- Control cookies or analytics where available.
- Disconnect financial accounts.
- Use Plaid Portal to view and manage eligible Plaid connections or request deletion from Plaid.
- Opt out of sale, sharing, targeted advertising, or certain profiling if applicable.
- Appeal a denied privacy request where required by law.
To exercise privacy rights, contact us at info@dimecfo.com. We may need to verify your identity before fulfilling certain requests.
If you unsubscribe from marketing emails, we may still send non-marketing messages such as service, security, account, legal, or transaction-related notices.
State Privacy Rights
Some U.S. state privacy laws may provide residents with additional rights if Dime is subject to those laws. These rights may include access, deletion, correction, portability, and opt-out rights related to sale, sharing, targeted advertising, or profiling.
Utah's Consumer Privacy Act applies to certain businesses that conduct business in Utah or target products or services to Utah residents and meet revenue and data-processing thresholds. Registration in Utah alone does not determine whether the law applies.
Before publishing, Dime should determine which state privacy laws apply based on Dime's size, revenue, user counts, data practices, and statutory thresholds. If any apply, this policy should be updated to include the required state-specific disclosures, including categories of personal information collected, categories of sources, purposes, categories of recipients, retention periods, sensitive personal information practices, and sale/share/targeted-advertising disclosures.
Children's Privacy
Dime is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Dime, contact us at info@dimecfo.com and we will take appropriate steps to review and delete the information where required.
If Dime later serves teenagers or family accounts, this section should be updated before launch.
International Users
Dime is operated from the United States. If you access Dime from outside the United States, your information may be processed and stored in the United States or other countries where our service providers operate.
Before serving users in the European Economic Area, United Kingdom, Switzerland, or other jurisdictions with international transfer, lawful-basis, data-subject-rights, or representative requirements, Dime should add jurisdiction-specific disclosures.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, such as by updating the date above, posting a notice, or contacting users directly.
Contact Us
For privacy questions or requests, contact us at:
Email: info@dimecfo.com
Mailing address: [Dime Utah legal entity name and mailing address]
Before publishing, replace the placeholders above with a monitored privacy contact and the correct legal entity information.