Privacy Policy
Version 2026-09-26
What this service does
LowScout ("LowScout", "we", "us", or "our") is a financial software service operated as a sole proprietorship in the State of Georgia, United States. This Privacy Policy takes effect on the date LowScout begins accepting paid subscriptions. LowScout helps you find recurring expenses and decide what to cancel or reduce. To do that, it analyzes bank and card statements (PDF or CSV) that you explicitly choose to upload — or, only if you choose to connect one, transaction activity from a bank account connected through Plaid (see "Connected accounts" below). Every uploaded file is malware-scanned before it is processed.
Data we store
Your account details (email address and optional display name); your consent decisions; the statements you upload and the transactions, recurring charges, and findings our analysis derives from them; corrections and decisions you make; cancellation actions you choose to track; if you connect a bank account, the transactions imported through that connection, each connected account’s name, type and last four digits, its balance figures (current balance, available balance and credit limit, where your bank provides them), and the connection record itself (with the access credential stored only in encrypted form); if you subscribe to a paid plan, your subscription status and the customer and subscription references from our payment processor (never your full card number); for AI requests, an audit record that identifies the LowScout facts supplied to the request, the model and prompt version used, the validation result, and the text shown to you; and an audit trail of sensitive actions on your account. Files are stored privately and are only accessible to your account through short-lived, signed links.
Data we do not collect
We do not read your email, and we do not monitor accounts you have not connected. We do not receive or store your bank username or password — if you connect a bank account, you authenticate through Plaid's connection flow, never on LowScout. We do not receive or store your full card number — payment details are handled by our payment processor, Stripe. We do not use or store full account numbers or Social Security numbers. If you connect a bank account, we do store that account’s balance figures so we can show them back to you — see “Connected accounts” below. Connecting a bank is optional and requires its own separate, explicit consent first; without it, your data comes only from files you upload.
How data is protected
Files are stored in private storage with expiring access links and scanned for malware before processing. Sensitive values are excluded from application logs and from error reports. Access to your records is checked on the server for every request, and sensitive operations are recorded in an audit trail.
Optional capabilities
Connected bank accounts, AI summaries, and cancellation tracking are optional, each behind its own separate consent, and each withdrawable at any time with immediate effect. The product is fully functional without them.
Connected accounts (optional; Plaid)
Connecting a bank account is optional — uploading statements is always an alternative. If you connect an account, we use Plaid Inc. as our service provider to establish and maintain the connection. You authenticate through Plaid's connection flow; we do not receive or store your bank login credentials. We use Plaid's Transactions product. Through it we receive your transaction activity and information about the accounts you connect. We keep: the institution name; each transaction's date, amount, description, a merchant hint and pending/settled status; and, for each connected account, its name, type, last four digits, connection and sync status, and its balance figures — the current balance, the available balance and the credit limit, where your bank provides them. We use this to show your connected accounts and their balances, to find and monitor your recurring charges, and to tell you about upcoming charges and changes. We do not use or store full account or card numbers or Social Security numbers. Balances are the figures your bank last provided, not a live reading: your Connected accounts page shows when they were last updated. While connected, transactions sync automatically; you can disconnect at any time, and when you do we end the connection at Plaid and delete the transactions imported through it, together with that connection’s account details and balance figures. If you delete your LowScout account, we end every bank connection at Plaid before your data is deleted. Plaid's handling of your information is governed by Plaid's End User Privacy Policy (https://plaid.com/legal/#end-user-privacy-policy), and you can view or revoke your connections through Plaid's portal. Connecting a bank is a separate, optional consent you give at the moment you connect — accepting this Privacy Policy alone does not connect any account. If we materially change how connected-account data is used, we will publish an updated version and ask you to re-consent before syncing continues; until you do, we pause syncing for your account.
Payments and billing (Stripe)
If you subscribe to a paid plan, payments are processed by Stripe, Inc. You enter your card details directly with Stripe; we do not receive or store your full card number. Stripe provides us with your subscription status and non-sensitive references (such as a customer identifier and the last four digits and brand of your card) so we can show your plan and manage billing. Stripe processes your information as an independent controller under its own privacy policy (https://stripe.com/privacy).
Service providers we use
We share the minimum data necessary with vetted providers that operate the service on our behalf: Stripe (payments), Plaid (optional bank connections), Clerk (sign-in and account authentication), PostHog (product analytics — see below), HeyCatch (website analytics on our public web pages — see below), PromoteKit (affiliate referral attribution for partner links, when switched on — see below), Sentry (error monitoring, with sensitive values redacted), and our cloud hosting and file-storage providers. No third-party AI model provider is enabled today, so none receives your data (see "AI features" below). We do not sell your personal information.
AI features (optional; not enabled)
LowScout has optional AI features — a plain-English summary of your audit, drafting of cancellation scripts, and an assistant called Scout that answers questions about what LowScout found. No third-party AI model provider is enabled today, and no data is sent to one. Before we enable one, we will tell you which provider it is and how it handles your data, and ask for your consent to the AI processing that feature needs; nothing is sent to that provider unless and until you give it. If you then turn an AI feature on, what is sent is limited to what that feature needs. For the summary and scripts, that is limited structured facts about your recurring charges that LowScout has already read or calculated, such as merchant names, amounts and billing cadence. For Scout, it is the question you type, earlier questions in the same temporary conversation, and only the LowScout financial facts needed to answer your question from features available in your account at that time. Earlier questions are sent only so a follow-up question makes sense; sending them does not store them, and the conversation ends when you leave it. Where a fact concerns a connected account, that account is described only by its type where needed — never by its name, institution or last four digits. Scout does not receive unrestricted access to your account data. We never send your uploaded documents, raw statement text, full account or card numbers, bank login details, or your email address to an AI provider. AI features stay optional and can be turned off at any time.
Analytics
We use PostHog to understand how the product is used and to improve it. PostHog events are sent from our servers, not by trackers in your browser, and your identity in PostHog is an opaque, de-identified reference rather than your email. PostHog also records how you first arrived — the campaign tags on the link you followed and the referring website's domain, kept in a first-party cookie and then with your account — so we can tell which channels work. On our public web pages only (never on sign-in, sign-up, onboarding, or any page inside your account), we also use HeyCatch for pseudonymous website analytics: its script records page views and interactions such as clicks, campaign and referrer information, a random identifier stored in your browser, your IP address, and basic device and browser information. HeyCatch does not receive your name, email, LowScout account identifiers, financial-institution or account details, transactions, merchants, amounts, balances, Plaid data, or uploaded statement contents, and session recording is disabled. We use this data in aggregate to improve the product; de-identified and aggregate analytics may be retained even after your account is deleted, because they can no longer be linked back to you through LowScout.
Affiliate referrals (PromoteKit)
Some people may find LowScout through a partner's link. Referral attribution is not switched on today. When it is, and you arrive through a partner's link, we use PromoteKit to credit that partner — for affiliate referral attribution only; it is not part of our product analytics. Its script runs only on our home page and our pricing page, and only when you arrive through a partner's link — never on sign-in, sign-up, onboarding, or any page inside your account, and not at all if your browser sends a Global Privacy Control signal or you have turned it off on our Privacy choices page. Loading the script, like any web request, gives PromoteKit your IP address and basic browser information. If the page address carries a partner's referral code and no referral is already stored in your browser, the script sends PromoteKit that code and our program identifier, and stores the referral identifier PromoteKit returns in a cookie on our website until it expires; a later partner link does not replace it. If you then start a paid subscription in the same browser, and have not since opted out (including through Global Privacy Control), LowScout adds only that validated referral identifier to your Stripe checkout, as checkout metadata, and nothing else. Where PromoteKit is connected to our Stripe account to attribute referrals and calculate partners' commissions, it can access the associated Stripe checkout record; that Stripe record may contain customer details collected during checkout, such as your email address and, where applicable, your name and billing address. LowScout does not send PromoteKit your name, your email, your LowScout account identifiers, bank or account details, transactions, merchants, balances, Plaid data, or uploaded statement contents. The referral identifier never affects your price, your plan, or what you can use, and if you did not arrive through a partner link, nothing is attached to your checkout.
Data retention
We keep the statements you upload and the data derived from them for as long as your account is active, so your audit and history stay available — until you delete them or delete your account. A connected account’s balance figures are not kept as a history: each refresh replaces the previous figures, so we hold only the most recent ones. Signed access links to your files are short-lived and expire within minutes. When you delete a statement or your account, the underlying data is deleted as described below. After account deletion, we retain only limited records where necessary for security, fraud prevention, dispute resolution, legal compliance, and our payment processor’s own requirements — including a non-personal audit record that a deletion occurred, and billing records that Stripe retains under its own policies. De-identified and aggregate analytics may also be retained. We keep such records only as long as needed for those purposes.
Deleting your data
You can delete uploaded files at any time from within the product, and disconnect any connected bank account from Settings. You can also delete your entire account yourself from Settings → Delete account: this cancels any paid subscription immediately, ends and revokes every connected bank connection at Plaid first, and then removes your stored files and all account data — leaving only the limited records described under "Data retention". Deletion is permanent and is not reported complete until every bank connection has been ended.
Your rights and choices
You can access your data in the product, correct your display name, withdraw any optional consent at any time with immediate effect, export a copy of your data by contacting support, and delete your account yourself. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these, or to ask a question about your data, contact us at lowscoutsupport@gmail.com.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the version and ask you to review and accept the updated policy; your continued use after changes take effect means you accept them.
Contact
Questions about your privacy or this policy? Contact us at lowscoutsupport@gmail.com. LowScout is operated as a sole proprietorship in the State of Georgia, United States.