Privacy and deletion

Financial records and identity

• Sightline stores no name, e-mail address, street address, telephone number, birth date, government ID, or account number.
• Sightline stores financial records under opaque IDs. These records are sensitive. A detailed set of records can identify a person.
• Clerk holds your identity. The Sightline service holds no key that can read that identity.
• Plaid holds your bank identity. Sightline can read bank data through Plaid while a connection stays active.

Data from a bank connection

Sightline stores the institution name, account type and subtype, balances, currency, and credit limit.

Sightline uses the institution name and account subtype as an alias, such as “TD chequing”.

A number suffix separates accounts with the same alias. This suffix does not come from your account number.

For transactions, Sightline stores amounts, dates, transaction status, currency, merchant text, and the personal finance category.

Sightline stores the transaction description after the text filter.

Sightline does not store bank account names, official account names, or account number masks. It does not store account owners, locations, payment metadata, counterparties, or check numbers.

Sightline does not request the original transaction description. It does not store logo URLs or website URLs.

Sightline never stores or logs raw provider responses.

Limits of the text filter

The filter applies to text from Plaid, agents, and data migration. It removes control characters and limits each field to 200 characters.

It replaces text for transfers between persons with a category label. It replaces e-mail addresses, telephone numbers, and long digit sequences with markers.

The filter reduces identifiers. It cannot find every personal name. Merchant text can still contain a name.

What each removal deletes

Delete a manual record

Sightline deletes the record. Sightline keeps the prior values of each record that an agent changed or deleted. Removal of the related account or household deletes these values.

Remove one linked account

Sightline deletes the account and all related values, transactions, owners, daily components, and log rows.

Remove a bank connection

Sightline deletes all accounts and related data for that connection. It also asks Plaid to remove the connection.

Remove a household member

Sightline deletes the membership, its agent grants, and its tokens. Financial records stay.

Revoke an agent

The agent loses access. Financial records stay.

Delete a household

After typed confirmation, Sightline deletes all household data, removes its Plaid connections, and deletes the Clerk organization.

Delete a user account

All memberships go. If you are the last administrator of a household, deletion also removes that household after typed confirmation.

Deleted data can stay in backups for 7 days, until the backups expire.

One linked account at Plaid

Plaid cannot remove one account from a connection through its API.

The control page first deletes the account data in Sightline. It then opens Plaid Link update mode for you to stop account access.

If you do not complete that step, Sightline holds no data for that account, but Plaid can still read it.

You can remove the whole bank connection on the control page instead.

Data at Plaid

Removal of a bank connection ends its Plaid access token and charges.

Plaid states that its systems then delete personal data, with exceptions and no stated period.

Use the Plaid Portal for a deletion request to Plaid.

Logs and notices

Logs contain request IDs, tool names, opaque IDs, error codes, and durations.

Logs contain no amounts, text fields, tokens, or provider payloads.

Sightline holds no e-mail address, so it cannot send e-mail. Notices appear in tool results or on the control page.

These notices include bank repair requests, the end of a plan, and deletion dates.