Privacy Policy
Effective September 11, 2026
CashShield is a financial-planning platform operated by Xmbroider LLC (collectively, “CashShield,” “we,” “our,” or “us”). This policy explains how we collect, use, disclose, and protect information when you use our United States cash-flow planning service. CashShield helps households forecast balances, organize transactions, scan receipts, and connect eligible financial accounts.
Information we collect
- Account and identity information: name, email address, authentication provider, email-verification status, household membership, and security information associated with multi-factor authentication. Authentication providers may process your password or phone number; CashShield does not display your password.
- Financial information: connected institution and account names, account type, masked account identifiers, balances, transactions, recurring transaction estimates, and Plaid connection status. CashShield does not receive the username and password you use with your financial institution.
- Planning information: manual transactions, recurring bills and income, categories, needs-versus-wants choices, forecasts, household assignments, and account settings.
- Receipt information: receipt photographs, merchant, date, total, extracted products, prices, and the products you select for price history.
- Subscription information: Stripe customer and subscription identifiers, plan status, billing period, and payment status. Stripe processes payment-card details; CashShield does not store full card numbers.
- Technical and security information: synchronization records, errors, timestamps, and security events needed to operate and protect the service.
How we use information
We use information to provide forecasts and household features, synchronize connected accounts, process receipts, build private price history, authenticate users, prevent fraud and abuse, administer subscriptions, provide support, maintain reliability, and comply with legal obligations. We do not use connected financial data to make lending or credit decisions.
Service providers
We disclose information as needed to providers that operate CashShield: Plaid for account connectivity; Google Firebase and Google Cloud for authentication, databases, file storage, functions, and security; Google Gemini for receipt-image extraction; Stripe for subscriptions and payments; Resend for service email; and hosting and infrastructure providers. Their handling of information is governed by their agreements and privacy practices.
We may also disclose information when required by law, to protect users or the service, or as part of a business transaction with appropriate safeguards. We do not sell personal information or share it for cross-context behavioral advertising.
Household sharing
Information assigned to a household is available to authenticated members of that household. Household owners can manage membership and billing. Only invite people you trust, and remove access when it is no longer appropriate.
Retention and deletion
We retain information while your account is active and as needed to provide the service, resolve disputes, prevent abuse, meet legal obligations, and maintain limited backups. Disconnecting a bank stops future synchronization. You may choose to retain or delete imported records when disconnecting. Receipt photographs and planning records remain until deleted through an available product control or an approved deletion request.
To request account deletion, follow the verified-account process on our Support and deletion page. We may retain limited records when legally required or reasonably necessary for fraud prevention, billing, security, or dispute resolution.
Your choices and rights
You may review and correct profile and planning information in CashShield, disconnect linked institutions, manage your subscription, and request access, correction, or deletion. Depending on where you live, you may have additional privacy rights and a right to appeal a denied request. We will verify requests before acting.
Security
CashShield uses verified email, multi-factor authentication, household access rules, encrypted server-side Plaid tokens, verified Plaid and Stripe webhooks, restricted secrets, and transport encryption. No service can guarantee absolute security. Visit our Security page for details and reporting instructions.
Children and geography
CashShield is intended for United States residents age 18 or older. It is not directed to children, and we do not knowingly collect personal information from children.
Changes and contact
We may update this policy as CashShield changes. We will revise the effective date and provide additional notice when appropriate. For privacy questions or requests, email [email protected].