Last updated: April 4, 2026
This page describes how Subtrack, operated by EDC Properties Inc. ("Company," "we," "us," or "our"), a Wyoming corporation, handles financial data when you connect a bank account through our integration with Plaid Inc. ("Plaid"). We believe in full transparency about what data is accessed, how it is processed, and what rights you have.
1. What Data We Access
When you connect a bank account, we use the Plaid Transactions product to retrieve transaction-level data from your financial institution. The specific data fields we access include:
- Merchant name — the name of the business or service provider
- Transaction amount — the dollar amount of each transaction
- Transaction date — when the transaction occurred
- Transaction category — Plaid-assigned category (e.g., "Software," "Subscription")
- Recurring frequency — whether Plaid identifies the transaction as recurring (monthly, annual, etc.)
2. What We Do NOT Access
We explicitly do not access, receive, or store:
- Bank account numbers
- Routing numbers
- Account balances
- Login credentials (username, password, MFA tokens)
Your banking credentials are entered directly into Plaid's secure interface and are never transmitted to or visible to Subtrack.
3. How Data Is Processed
Transaction data retrieved from Plaid is processed in memory on our server-side API routes. Our system analyzes transactions to identify recurring charges and subscription patterns. Only the extracted subscription metadata (merchant name, amount, billing cycle, next expected date) is persisted to your Subtrack account. Raw transaction data is not written to any persistent storage or database.
4. How Data Is Stored
- Subscription metadataderived from financial transactions is stored in Google Cloud Firestore, encrypted at rest using AES-256 via Google Cloud Platform's default encryption.
- Plaid access tokensare stored in Firestore with GCP's default AES-256 encryption at rest. These tokens are only accessed server-side via authenticated API routes and are never exposed to the client or browser.
- All data is hosted on Google Cloud Platform (us-central1) with automatic redundancy. Data in transit is encrypted via TLS 1.3.
5. Data Retention
- Raw transaction data: Processed in memory only and not logged or persisted. Discarded immediately after subscription extraction is complete.
- Extracted subscription metadata: Retained for the duration of your active account. Deleted within 30 days of account deletion or upon request.
- Plaid access tokens: Retained until you disconnect your bank account. Upon disconnection, tokens are revoked with Plaid and permanently deleted from Firestore.
6. Application Logging
Application error logs may temporarily contain anonymized metadata but never include raw financial transaction data, account numbers, or credentials. Logs are automatically expired after 90 days via Google Cloud Logging retention policies.
7. Plaid's Role
Plaid acts as a data processor on our behalf. Plaid retrieves your financial data directly from your financial institution and transmits it to Subtrack via their encrypted API. Plaid is SOC 2 Type II certified and maintains rigorous security standards.
For details on how Plaid handles your data, please review:
By using Plaid through Subtrack, you also agree to Plaid's end-user services agreement linked above.
8. Plaid Data Deletion Rights
In accordance with our agreement with Plaid, if Plaid requests deletion of data obtained through their service, we will comply within 30 days. This includes revoking stored access tokens and deleting any derived data that Plaid identifies for removal.
9. Your Rights
You have full control over your financial data connection:
- Disconnect anytime: You can disconnect your bank account at any time from Settings > Integrations. This immediately revokes the Plaid access token and stops all future data retrieval.
- Request deletion: You can request deletion of all financial-derived data by contacting privacy@getsubtrack.com.
- Plaid portal: You can also manage your Plaid connections directly at my.plaid.com (Plaid's consumer portal).
10. Contact
For questions about our financial data practices:
EDC Properties Inc.
10301 Ranch Road 2222, Austin, TX 78730
Email: privacy@getsubtrack.com
Security concerns: security@getsubtrack.com