My Copilot AI LLC (“we”, “us”) operates Money Copilot AI, a Model Context Protocol (MCP) service that lets AI assistants log, search, and summarize spending on your behalf. My Copilot AI LLC is responsible for the personal data described in this policy.
01Data we collect
- Expense data you or your connected AI assistant submit — amounts, categories, dates, notes, and any merchant, payment method, or tags you provide.
- Income and budget data — income entries, recurring bill/subscription details, category budgets and limits, and any budget templates you save.
- Account information such as your email address, used for authentication, sign-in, and support, and — if you enable budget-alert emails — a notification email address.
- Usage data such as request logs, timestamps, error diagnostics, and an activity log of actions taken on your account (e.g. an expense added, a report viewed), needed to operate the service reliably and to investigate abuse or support requests.
- Technical and location data — your IP address and the approximate location (city, region, country and time zone) our hosting provider derives from it, recorded against your account as the place you were last seen. We use this to answer support requests accurately, to detect unusual account access, and to investigate abuse. We do not use GPS or any precise location, and we do not track your location in the background.
02How we use data
- To store and retrieve your expenses, budgets, and summaries.
- To operate, maintain, and improve the reliability of the service.
- To respond to support requests.
We do not sell your data, and we do not use your expense data to train third-party AI models.
03Data sharing
We do not sell your personal or financial data. We share data only with service providers needed to operate the service: Turso (database hosting), Resend (transactional email, only when you enable email features), MCPize (authentication and AI-assistant connections), Vercel (website hosting, performance monitoring, and analytics), and Google Fonts (font delivery). These providers may process account, usage, device, browser, and network information such as an IP address as required to deliver their services. We may also disclose information when required by law.
04Data retention
We retain your financial data (expenses, budgets, income, and other finance records) for as long as your account is active. You can delete it at any time — by asking your connected AI assistant to delete your account data, or by contacting support, who will clear it for you. This permanently removes your expenses, budgets, and finance records and cannot be undone.
Account identity information (such as your display name) and security/activity logs are normally deleted within 90 days after account deletion. We may retain specific records longer when reasonably necessary to prevent fraud, resolve a support or security incident, comply with law, or establish or defend legal claims.
05Security
We use industry-standard measures — encryption in transit, access controls, and least-privilege practices — to protect your data. No system is perfectly secure, and we encourage you to use strong, unique credentials.
06Your rights
You may request access to, correction of, or deletion of your data by contacting us. Depending on your jurisdiction, additional rights may apply (e.g. GDPR, CCPA).
07Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date above.
08Contact
Questions about this policy? Reach us via our customer support page.