Join Early Access

Privacy Policy

Version: 1.1
Effective date: October 15, 2026
Last updated: October 15, 2026
Company: MOOGUL INC
Address: 3202 MCKNIGHT EAST DR PMB 311, PITTSBURGH, PA 15237
Privacy contact: [email protected]

1. Overview

Moogul is a goal-based budgeting app for people whose financial lives may include multiple accounts, currencies, income sources, expenses, documents, financial institutions, and goals.

This Privacy Policy explains how MOOGUL INC (“Moogul,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information when you use Moogul’s mobile app, websites, account connection flows, budgeting tools, AI chat features, support channels, and related services.

Moogul handles sensitive financial information. This policy explains what information we collect, why we use it, who we share it with, how long we keep it, and what choices and rights you have.

2. Availability

Moogul’s first public launch is focused on the United States.

Moogul may be accessible to users outside the United States, including through manual budgeting features, but non-US jurisdictions are not specifically supported at launch. If you use Moogul outside the United States, your information may be processed in the United States and by United States-based service providers. We may update this policy or add jurisdiction-specific notices before actively supporting additional countries.

3. Information We Collect

We collect information in the following categories.

Account And Identity Information

We collect information you provide when you create or manage a Moogul account, such as:

  • Name.
  • Email address.
  • Password or authentication information.
  • Account settings and preferences.
  • User identifiers.
  • Home country, home district, or routing information needed to operate Moogul.

Financial Account Information

When you connect a bank, card, or other financial account through Plaid, or when you manually enter financial information, we may collect:

  • Institution name.
  • Account name.
  • Account type and subtype.
  • Account mask or last four digits.
  • Country associated with the account or financial relationship.
  • Currency.
  • Current balance.
  • Available balance.
  • Credit limit, if available.
  • Account status.
  • Provider-updated timestamps.
  • Account connection status and sync status.

Moogul does not ask you to give Moogul your bank password directly. Plaid Link handles bank login, multifactor authentication, OAuth, consent, and provider account selection. After you complete the Plaid flow, Moogul receives information needed to provide Moogul’s service.

Provider Connection Information

When you connect an account through Plaid, we may collect or generate:

  • Plaid item, account, or connection identifiers.
  • Provider session state.
  • Provider consent and account-selection metadata.
  • Provider webhook events.
  • Provider token references or secret references.
  • Connection health, repair, disconnect, and sync metadata.
  • Provider evidence needed to create, update, secure, troubleshoot, or audit account connections.

Manual Financial Information

If you manually add accounts, assets, debts, cash, foreign-currency holdings, imports, documents, notes, or balance adjustments, we collect the information you provide and the metadata needed to use it in Moogul.

Manual financial information may include:

  • Manual account names and descriptions.
  • Balances and balance adjustments.
  • Assets and debts.
  • Cash and currency holdings.
  • Income sources.
  • Goal buckets.
  • Expense owners and expense classifications.
  • Uploaded documents, ingested documents, imported records, and extracted document facts, if enabled.
  • Notes, labels, categories, and supporting details.

Goals, Budgets, Forecasts, And Product Content

We collect information you create or use in Moogul’s budgeting and planning features, such as:

  • Goals.
  • Goal buckets.
  • Budgets.
  • Income sources.
  • Expense categories.
  • Expense ownership or responsibility signals.
  • Obligations.
  • Cash-flow forecasts.
  • Simulations.
  • Progress and status data.
  • Preferences that affect calculations.

Moogul may use financial patterns, classification algorithms, and AI-assisted tools to identify income sources, classify expenses, infer expense ownership, organize financial records, and provide budgeting or goal-related features.

Chat And Assistant Information

If you use Moogul chat or assistant features, we may collect and process:

  • Messages and prompts you send.
  • Assistant responses.
  • Conversation metadata.
  • Financial context used to respond to your request.
  • Documents or document-derived facts you ask Moogul to process.
  • Feedback and correction signals.

For approved product AI features, we use Amazon Bedrock within AWS to process only the minimized and redacted summaries needed for your request. We filter input before model processing and do not send raw customer identities, financial histories, private conversations, documents, or credentials to models. Redacted summaries may still be personal information. AWS states that model providers cannot access prompts and outputs in its managed Bedrock deployments. We do not send customer information to external coding assistants or use it to train or fine-tune models.

Internal non-AI software performs financial calculations and forecasts. AI may explain approved summaries of those results; model-generated arithmetic is not the source of your financial figures.

Documents And Imports

If you upload, import, or ingest documents, we may collect:

  • The uploaded file.
  • File metadata.
  • Extracted text, tables, financial facts, account facts, income facts, expense facts, or other structured information.
  • Processing status and audit information.

Documents and extracted information are stored on Moogul-controlled servers in our private cloud environment.

Device, App, And Usage Information

We may collect technical and usage information needed to operate and secure Moogul, such as:

  • Device type.
  • Operating system.
  • App version.
  • Browser type.
  • IP address.
  • API request metadata.
  • Realtime connection metadata.
  • Screens or features used.
  • Account-add funnel events and sync progress.
  • Security and fraud-prevention signals.

Moogul does not currently use external product-analytics providers, crash reporting SDKs, support SDKs, advertising SDKs, or client-side AI SDKs that receive user data. First-party website measurement is described in section 10.

Communications And Support

If you contact us, join a waitlist, request support, or submit a privacy request, we may collect:

  • Contact details.
  • Message contents.
  • Support history.
  • Request metadata.
  • Any information you choose to provide.

We currently use Resend for email services. Resend may process email addresses, message metadata, and email content needed to send or manage Moogul emails.

Security And Audit Information

We collect and maintain information needed to secure Moogul and audit sensitive actions, such as:

  • Login attempts.
  • Token lifecycle events.
  • Account connection lifecycle events.
  • Admin actions.
  • Service-to-service trust events.
  • API logs.
  • Abuse, fraud, and security investigation records.

4. How We Collect Information

We collect information:

  • Directly from you, such as when you create an account, add a manual account, create a goal, add an income source, upload a document, send a message, or contact support.
  • Automatically, such as when you use the app, visit our website, or interact with our services.
  • From Plaid, when you authorize a Plaid account connection.
  • From Resend, when it helps us send or manage email communications.
  • From AWS-managed Amazon Bedrock models, when they return outputs for approved assistant features.

We do not buy personal financial information from data brokers.

5. How We Use Information

We use personal information to:

  • Create and manage your Moogul account.
  • Authenticate you and maintain your session.
  • Connect financial accounts you choose to connect.
  • Display accounts, balances, currencies, goals, goal buckets, budgets, income sources, and forecasts.
  • Route account data to the correct Moogul district.
  • Maintain provider connection status and sync progress.
  • Let you create and manage manual accounts, assets, debts, documents, income sources, and goals.
  • Identify income sources and classify financial activity based on financial patterns or classification algorithms.
  • Infer or organize expense ownership and expense categories.
  • Ingest, store, process, and extract information from documents you upload or import.
  • Provide AI chat or assistant features you use.
  • Provide customer support.
  • Send service, security, account, and policy notices.
  • Send marketing communications if you ask to receive them or where permitted by law.
  • Debug errors and monitor performance.
  • Protect against fraud, abuse, unauthorized access, and security incidents.
  • Comply with law, enforce our terms, and protect rights and safety.

We do not use your financial account data to sell targeted advertising. We do not sell your personal information.

6. Financial Account Connections

When you connect a financial account, Moogul asks Plaid to start an account connection flow. Plaid may ask you to authenticate with your bank or financial institution, complete security steps, and choose which accounts to share.

After the Plaid flow succeeds, Moogul receives information needed to provide the service, such as account identity, balances, provider connection metadata, and sync status. The exact information depends on Plaid, your financial institution, the accounts you select, and the products Moogul enables.

If you disconnect a bank connection, we stop collection and updates through it and revoke the connection. Disconnection alone does not close your Moogul account. Historical records remain only while needed for your requested service or another lawful purpose, subject to section 11 and your applicable deletion rights.

7. Account Deletion

If you delete your Moogul account, we disable login, revoke sessions, disconnect bank access, and stop synchronization. We retain only records needed for a documented lawful purpose, for up to two years after deletion unless a specific law requires longer. We delete earlier when a valid privacy request or applicable law requires it. Records retained after deletion have restricted access and use. At expiry, we delete identifiable information or retain only irreversibly anonymized analytics as described in section 11.

If you later sign up again with the same email address, the new account will be treated as a new account with a clean slate. We do not plan to automatically restore the prior deleted account’s data into the new account.

8. How Moogul Stores And Routes Financial Data

Moogul uses a district-based architecture. A district is a Moogul storage and processing boundary for sensitive financial runtime data.

In general:

  • Central Station stores global account identity, routing, home district, and safe account locator information.
  • Districts store sensitive financial runtime data for accounts owned by that district.
  • The mobile app may query district services to show your financial information in one experience.

This architecture helps Moogul avoid copying all sensitive account data into one global bucket. It does not mean every vendor or service provider stores data in the same infrastructure boundary.

Uploaded or imported documents are stored on Moogul-controlled servers in our private cloud environment.

9. How We Share Information

We share personal information only as needed to operate, secure, support, improve, and comply with law for Moogul.

Plaid

We share information with Plaid when you choose to connect an account or use Plaid-enabled features. Plaid may process your information under Plaid’s own terms and privacy notice in addition to Moogul’s policy.

Resend

We use Resend to send email. Resend may process information needed to send, deliver, secure, or troubleshoot Moogul emails.

AWS And Amazon Bedrock

AWS hosts our application data, backups, and supporting infrastructure. For approved assistant features, Amazon Bedrock processes minimized, redacted summaries within AWS under the safeguards described in section 3. We do not route these requests to external model-provider APIs. Bedrock is an AWS-managed service, not a model inside Moogul’s own VPC.

Apple, Google, And App Platforms

If you use Moogul through Apple or Google platforms, those platforms may process information under their own terms and privacy policies. If Moogul later uses push notifications or other platform messaging features, Apple or Google may process device tokens, message metadata, or notification delivery information.

We may disclose information when we believe it is necessary to:

  • Comply with law, legal process, or regulatory requirements.
  • Protect the rights, safety, and property of Moogul, users, or others.
  • Detect, prevent, or investigate fraud, abuse, security incidents, or technical issues.
  • Enforce our Terms of Service or other agreements.

Business Transfers

If Moogul is involved in a merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to appropriate confidentiality and legal protections.

No Sale Of Personal Information

We do not sell personal information. We do not sell financial account information. We do not share personal information with data brokers.

10. Cookies, SDKs, And Similar Technologies

Moogul does not currently send customer data to external product-analytics or CRM partners or use third-party advertising trackers. Our website records first-party page views and campaign-attribution information, using visitor and session identifiers stored in your browser. These records help us understand website use and service reliability; they can include the page visited, time, language, and campaign or click identifiers in the page URL. We handle these identifiers as potentially personal information.

Moogul websites and apps may still use technologies needed for:

  • Keeping you signed in.
  • Remembering preferences.
  • Securing the service.
  • Delivering app or website functionality.
  • Connecting accounts through Plaid.
  • Sending and managing emails through Resend.
  • Providing approved AI features through Amazon Bedrock.

11. Retention

We retain personal information only while necessary for the requested service or another documented lawful purpose:

  • Active accounts: Records needed for your service, including financial data, documents, and assistant history. We review inactive accounts for continuing need; inactivity does not itself mean the account has been deleted.
  • Deleted accounts: Necessary records for up to two years from deletion, only where lawful and proportionate. Valid deletion rights can require earlier removal. Longer retention requires a specific legal obligation or hold, limited to the affected records.
  • Operational logs: Normally up to 60 days.
  • Security and administrative audit logs: Normally up to 180 days. Specific investigations or legal obligations may require longer retention of relevant records.
  • Rolling backups: Normally up to 14 days from creation. Isolated copies expire through the backup cycle; deletions are reapplied before restored data is put back into service.
  • Privacy and legal records: Minimal evidence for the applicable legal or investigation period, rather than a copy of the whole account.

We minimize and redact logs, but do not assume that redaction makes them anonymous. We ask service providers to delete copies processed on our behalf when due and verify completion or contractual backup expiry. A provider may have independent legal obligations; disconnecting bank access does not erase all records held by a bank or Plaid under its own terms.

Internal anonymous analytics: After the permitted retention period, we may retain irreversibly anonymized or aggregated information to understand product use and improve budgeting features and service reliability, where lawful and permitted by provider agreements. We remove identifiers and identifying combinations, destroy linking mappings, and assess whether records could reasonably identify a person. We do not attempt reidentification. If reliable anonymization cannot be demonstrated, we delete the records. We do not send this information to external analytics or CRM partners under our current launch scope.

These limits do not override applicable consumer rights. Contact [email protected] to request deletion or ask about retained records.

12. Your Choices And Rights

Depending on where you live, you may have rights to:

  • Request access to personal information we hold about you.
  • Request correction of inaccurate personal information.
  • Request deletion of personal information, subject to exceptions.
  • Request a copy or export of certain information.
  • Disconnect financial provider connections.
  • Opt out of marketing communications.
  • Opt out of sale or sharing where applicable.
  • Limit certain uses of sensitive personal information where applicable.
  • Challenge or complain about our privacy practices.

To exercise privacy rights, contact us at [email protected]. We may need to verify your identity before fulfilling certain requests.

Some requests may be limited by law, security needs, fraud prevention, dispute resolution, backup limitations, technical constraints, or legal retention obligations.

13. United States Privacy Notice

If you are a resident of a US state with a consumer privacy law, you may have specific rights under that law. These rights may include access, deletion, correction, portability, opt-out, non-discrimination, and appeal rights.

For California residents, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives covered consumers rights relating to personal information and sensitive personal information. Moogul may not be subject to every state privacy law or every consumer request requirement, but we will review requests we receive at [email protected] and respond as required by applicable law.

For US users, Moogul’s posture is:

  • We do not sell personal information.
  • We do not sell financial account information.
  • We do not use financial account information for cross-context behavioral advertising.
  • We collect sensitive financial information only to provide Moogul features you request, secure the service, comply with law, and support legitimate operational needs.

14. Financial Privacy Notice

Moogul handles financial information, including connected account information and user-entered financial information. US financial privacy laws may apply to some companies that provide financial products or services.

Regardless of final legal classification, Moogul intends to safeguard financial information and limit its use to providing, securing, supporting, improving, and complying with law for Moogul.

Moogul does not intend to share nonpublic personal financial information with non-affiliated third parties for their own marketing purposes.

15. International Users And Future Jurisdictions

Moogul is focused on a first launch in the United States. Moogul may be accessible elsewhere, but non-US jurisdictions are unsupported at launch.

If Moogul expands to other jurisdictions, Moogul may update this policy or add jurisdiction-specific notices before actively supporting those markets.

16. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These may include:

  • Encryption in transit.
  • Encryption at rest where implemented.
  • Access controls.
  • Authentication controls.
  • Audit logging for sensitive actions.
  • Provider token protection.
  • Monitoring and incident response.
  • Vendor review.
  • Employee and contractor confidentiality obligations.
  • Secure development and deployment practices.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

17. Children’s Privacy

Moogul is not intended for children under 13.

If you are at least 13 but under the age of majority where you live, you may use Moogul only with permission from a parent or legal guardian.

If we learn that we collected personal information from a child under 13 without required consent, we will take steps to delete it as required by law.

18. Changes To This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, such as by posting the updated policy, updating the effective date, notifying you by email, or providing in-app notice.

If a change requires consent, we will seek consent before applying the change where required.

19. Contact Us

For privacy questions, requests, or complaints, contact:

Moogul Privacy MOOGUL INC 3202 MCKNIGHT EAST DR PMB 311 PITTSBURGH, PA 15237 [email protected]