Granitewell Financial LLC Privacy Policy
Effective September 1, 2026
Granitewell Financial LLC (“Granitewell,” “we,” “us,” or “our”) understands that financial information is private and sensitive.
This Privacy Policy explains what we collect, why we collect it, who we share it with, how we protect it, and the choices you have.
1. Information We Collect
Information You Give Us
We may collect information you provide when you create or use Granitewell, including:
- your name;
- email address;
- account information;
- household priorities, commitments, rules, and goals;
- financial plans and assumptions;
- notes or other information you choose to enter; and
- messages you send to Granitewell.
Information From Connected Financial Accounts
If you choose to connect financial accounts, Granitewell may receive information you authorize through Plaid or another approved financial-data provider.
Depending on the account and permissions you choose, this may include:
- financial institution and account name;
- account type;
- masked account identifiers;
- balances;
- transactions;
- transaction dates and amounts;
- merchant or payee information;
- transaction descriptions and categories;
- recurring transaction information; and
- information needed to maintain the connection.
Granitewell does not receive your bank password when authentication is handled through Plaid Link.
Payment Information
Granitewell uses Stripe to process subscription payments.
Stripe may collect payment details, billing information, transaction information, authentication information, and information used to prevent fraud.
When you enter card information directly through Stripe, Granitewell does not receive or store your full card number or card security code.
Granitewell may receive limited billing information from Stripe, such as:
- subscription status;
- payment status;
- amount;
- payment date;
- payment-method type; and
- masked payment information.
Technical and Security Information
We and companies that help us operate Granitewell may collect technical information such as:
- IP address;
- browser and device type;
- operating system;
- login and session information;
- dates and times of access;
- application and error logs;
- security events; and
- fraud-prevention information.
2. How We Use Information
We use information to operate Granitewell and show you your financial picture.
That includes using information to:
- create and secure your account;
- connect and update financial information you authorize;
- maintain household information you choose to enter;
- show your current financial picture;
- show what has changed;
- calculate and show possible results from different choices or scenarios;
- provide forecasts, alerts, and other Granitewell features;
- process your subscription;
- provide customer support;
- maintain and improve Granitewell;
- detect fraud, abuse, and unauthorized access;
- protect Granitewell and our customers;
- maintain required business and transaction records;
- respond to legal requirements; and
- enforce our agreements.
Granitewell shows you your current financial picture, including what has changed and what the possible results could be from different choices. You remain in control of your finances and make all financial decisions.
3. Plaid
Granitewell uses Plaid to help you connect financial accounts.
Plaid will show you the information being requested and why it is being requested as part of the connection process.
You choose which eligible accounts to connect.
Granitewell uses the information you authorize through Plaid to operate the Granitewell features connected to your financial accounts.
If Granitewell later requests additional financial information that requires additional permission, we will use the appropriate consent process before obtaining that additional access.
Plaid also processes information under its own End User Privacy Policy.
4. How We Share Information
Granitewell does not sell your personal information or connected financial information.
Granitewell does not rent Plaid End User Data.
Granitewell does not give your connected financial information to other companies for their own advertising or marketing.
We may share information in the following limited situations.
Companies That Help Us Operate Granitewell
We use service providers for things such as:
- financial-data connections;
- hosting and application infrastructure;
- databases;
- security and authentication;
- payment processing;
- email and communications;
- logging and monitoring;
- backup and recovery;
- customer support; and
- other necessary business operations.
They may receive the information reasonably needed to perform the service they provide to Granitewell.
Where required, we use contracts and security requirements that limit how service providers may use and protect customer information.
When You Ask Us To
We may share information when you request or authorize us to do so.
Payments
We share information needed by Stripe to process payments you authorize, maintain your subscription, authenticate payments, and help prevent fraud.
Security and Legal Reasons
We may share information when reasonably necessary to:
- investigate fraud or unauthorized access;
- protect customers or Granitewell;
- comply with law;
- respond to valid legal process;
- enforce our agreements; or
- establish or defend legal rights.
A Business Transaction
If Granitewell is involved in a merger, acquisition, sale, financing, or similar business transaction, information may be transferred as part of that transaction where legally permitted.
A business transaction does not remove privacy or contractual protections that continue to apply.
5. How We Treat Connected Financial Information
Granitewell treats connected household financial information as sensitive information.
At launch:
- we do not sell it;
- we do not rent it;
- we do not provide it to third parties for their own advertising or marketing;
- we do not use it for cross-site behavioral advertising; and
- we do not use it to make financial decisions for you.
We may use and share financial information as needed to provide Granitewell, secure the Service, work with companies that help us operate Granitewell, process payments you authorize, prevent fraud, comply with law, and respond to your requests.
If these practices materially change in the future, we will provide any notice, consent, or choice required before the new practice applies.
6. Cookies and Similar Technology
Granitewell and companies that help us operate the Service may use cookies or similar technology for:
- login and authentication;
- security;
- preferences;
- application functionality;
- fraud prevention;
- diagnostics; and
- analytics.
Some service providers, including payment and fraud-prevention providers, may collect device, browser, network, or online-activity information under their own privacy policies.
Granitewell does not give those providers your connected financial information for behavioral advertising.
7. Privacy Signals
Some browsers use an older “Do Not Track” signal. There is no single standard governing that signal, so Granitewell does not change its practices solely because a browser sends a legacy Do Not Track signal.
Where applicable law requires us to honor a recognized browser or device privacy signal, we will do so.
8. How We Protect Information
Granitewell uses administrative, technical, and physical safeguards designed to protect customer information.
Depending on the system and risk, these safeguards may include:
- access controls;
- multi-factor authentication;
- encryption;
- secure credential management;
- logging and monitoring;
- software and security updates;
- service-provider review;
- backup and recovery procedures; and
- incident-response procedures.
We limit access to sensitive customer information to people and service providers who have a legitimate need for it.
No company can promise that a system will never experience a security problem.
If Granitewell discovers a security incident involving customer information, we will investigate it and provide notices when required by law.
Granitewell customer support will not ask you for your bank password.
9. How Long We Keep Information
We keep information only as long as reasonably needed to:
- provide Granitewell;
- maintain your account;
- protect security and prevent fraud;
- maintain required billing and consent records;
- meet tax, accounting, and legal requirements;
- resolve disputes; and
- enforce our agreements.
Different types of information may be kept for different periods.
When information is no longer reasonably needed, we will delete or de-identify it subject to legal, security, backup, accounting, fraud-prevention, and contractual requirements.
10. Closing Your Account and Deleting Information
You may ask to close your Granitewell account.
After account closure or a verified deletion request, we will delete or de-identify information that we are no longer required or permitted to keep.
We may keep limited records when reasonably necessary for:
- payment records;
- proof of agreements and authorizations;
- fraud prevention;
- security incidents;
- taxes and accounting;
- legal obligations; and
- existing disputes.
Disconnecting a financial account generally stops future retrieval through that connection, but it does not automatically delete information Granitewell already received and is legally permitted or required to keep.
11. Your Privacy Choices
Granitewell gives U.S. account holders a straightforward way to ask us to:
- tell you whether we hold personal information about you;
- provide access to eligible personal information;
- correct inaccurate personal information;
- delete eligible personal information; and
- provide a portable copy of eligible information where reasonably available.
We may need to verify your identity before completing a request.
Some information may be excluded where the law permits or requires us to retain it.
If the law where you live provides additional privacy rights, we will provide those rights as required.
You may send a privacy request to:
support@granitewellfinancial.com
We will not discriminate against you for exercising a legally protected privacy right.
12. Children and Household Members
Granitewell accounts are for adults age 18 and older.
An adult customer may choose to include information about other household members where it is relevant to the household's financial picture.
The customer is responsible for having the right to provide that information.
Granitewell is not designed for a child to independently create or operate an account.
13. Changes to This Privacy Policy
We may update this Privacy Policy when Granitewell, our technology, our providers, or our legal obligations change.
If a change materially affects how we collect, use, or share personal information, we will provide notice and any consent or choice required by law before the new practice applies.
The effective date at the top shows when this version took effect.
14. Contact Us
Granitewell Financial LLC
1666 Main St
Unit #269
Springfield, MA 01103