Privacy Policy
Version 2026-08-19
What this service does
LowScout helps you find recurring expenses and decide what to cancel or reduce. To do that, it analyzes bank and card statements (PDF or CSV) that you explicitly choose to upload — or, only if you choose to connect one, transaction activity from a bank account connected through Plaid (see "Connected accounts" below). Every uploaded file is malware-scanned before it is processed.
Data we store
Your account details (email address and optional display name); your consent decisions; the statements you upload and the transactions, recurring charges, and findings our analysis derives from them; corrections and decisions you make; cancellation actions you choose to track; if you connect a bank account, the transactions imported through that connection and the connection record itself (with the access credential stored only in encrypted form); records of any optional AI interactions (exactly which derived facts were sent and what came back); and an audit trail of sensitive actions on your account. Files are stored privately and are only accessible to your account through short-lived, signed links.
Data we do not collect
We do not read your email, and we do not monitor accounts you have not connected. We do not receive or store your bank username or password — if you connect a bank account, you authenticate through Plaid's connection flow, never on LowScout. We do not use or store full account or card numbers, Social Security numbers, or balance information. Connecting a bank is optional and requires its own separate, explicit consent first; without it, your data comes only from files you upload.
How data is protected
Files are stored in private storage with expiring access links and scanned for malware before processing. Sensitive values are excluded from application logs and from error reports. Access to your records is checked on the server for every request, and sensitive operations are recorded in an audit trail.
Optional capabilities
Connected bank accounts, AI summaries, and cancellation tracking are optional, each behind its own separate consent, and each withdrawable at any time with immediate effect. The product is fully functional without them.
Connected accounts (optional; Plaid)
Connecting a bank account is optional — uploading statements is always an alternative. If you connect an account, we use Plaid Inc. as our service provider to establish and maintain the connection. You authenticate through Plaid's connection flow; we do not receive or store your bank login credentials. We use Plaid's Transactions product; Plaid's service may return limited account metadata (including cached balance figures) alongside transaction data. We are designed to keep and use only the transaction information needed for this feature — institution name, transaction date, amount, description, a merchant hint, and pending/settled status — and we do not use or store full account or card numbers, Social Security numbers, or balance information. While connected, transactions sync automatically; you can disconnect at any time, and when you do we end the connection at Plaid and delete the transactions imported through it. If you delete your LowScout account, we end every bank connection at Plaid before your data is deleted. Plaid's handling of your information is governed by Plaid's End User Privacy Policy (https://plaid.com/legal/#end-user-privacy-policy), and you can view or revoke your connections through Plaid's portal. Connecting a bank is a separate, optional consent you give at the moment you connect — accepting this Privacy Policy alone does not connect any account. If we materially change how connected-account data is used, we will publish an updated version and ask you to re-consent before syncing continues; until you do, we pause syncing for your account.
Deleting your data
You can delete uploaded files at any time from within the product, and disconnect any connected bank account from Settings. Full account deletion is available on request to support: if you have connected bank accounts, deletion first ends every connection at Plaid, and then removes your stored files and all account data, leaving only a record — containing no personal information — that a deletion occurred. Self-serve account deletion ships in a later release.