Plaid Consumer Disclosure
Last updated: 2026-04-14
This disclosure is presented to you before you connect a financial account through Plaid. By clicking Connect you confirm that you have read and agreed to this disclosure.
What you are authorizing
By connecting your financial account through Plaid you authorize:
- Plaid Inc. to access your financial account on your behalf, retrieve transaction information, and share it with Support Stack Systems BBLLC ("SSS") in accordance with Plaid's End User Privacy Policy.
- SSS (StackAudit) to receive and use that transaction information solely for the purpose described below.
What SSS receives
- Institution name and masked account identifier.
- Transaction metadata: merchant name, amount, date, and category.
SSS does not receive or store your online banking username or password. Those credentials are handled only by Plaid.
What SSS uses it for
Exclusively to detect recurring software subscription charges and present them to you for review inside StackAudit. Charges you accept are added to your software inventory. Charges you reject teach the detector to ignore that merchant in the future.
SSS does not:
- Sell this data.
- Use it for advertising.
- Share it with any party other than the sub-processors listed in our Privacy Policy (currently Supabase as our database provider).
- Use it to train third-party AI models.
How we protect it
- Plaid access tokens are wrapped with AES-256-GCM application-layer encryption before they are stored, on top of our database provider's AES-256 disk encryption.
- All network traffic uses TLS 1.2 or higher.
- Access to the production database is limited to authorized SSS personnel with MFA.
How to disconnect
You may disconnect at any time from Settings → Data Connectors. When you disconnect:
- Your Plaid access token is deleted from SSS systems immediately.
- SSS calls Plaid's
itemRemoveendpoint so the token is also revoked upstream. - Detected charges associated with that integration are retained for 30 days and then deleted, or deleted immediately on request.
Your rights
You can request a full export or deletion of your data at any time. See our Privacy Policy for details or email privacy@supportstacksystems.com.