mintroopen beta
menu
Start free

Legal

Last updated: October 28, 2026

Two documents on one page: how we handle your information, and the terms you agree to when you use Mintro.

Version française

Privacy policy

Who we are

Mintro (mintro.money) is an envelope budgeting service, a product of Flaresoft Solutions Inc., Calgary, Alberta, Canada. Mintro holds your budget (envelopes, entries, and the transaction data needed to recognize your spending) and lets the AI agent you choose do the bookkeeping. We are not a bank. We do not move money. We never sell your data.

Flaresoft Solutions Inc. is responsible for the personal information Mintro holds. The person in charge of protecting it is our privacy officer, the founder. Write to privacy@mintro.money for anything in this policy, or by post to the privacy officer, Flaresoft Solutions Inc., 5005 Dalhousie Dr NW, Unit 175 #1497, Calgary, Alberta T3A 5R8, Canada.

What we collect and store

Your account identity (name, email, organization membership) is managed by Clerk, our identity provider. Your budget (envelope names, targets, entries you or your agents write) is stored by us. From your bank, via Plaid, we store what is needed to recognize a transaction: its date, amount, currency, the description your bank sends, the merchant name where Plaid provides one, whether it is still pending, Plaid's spending-category hint, and account details (nickname, last four digits, type, the institution name, and the balances the bank reports). When you first connect a bank we request about 90 days of history, not your full bank history. We do not store your bank credentials, and we do not keep raw bank payloads. Rows your bank sends that you never review are deleted after 90 days (30 for a bank account you never set up or left out); a transaction you typed and never filed is deleted after 45 days; what lands in your budget stays with it until you delete it. We collect no location, no contacts, and no browsing analytics.

Bank connections

Bank linking happens on Plaid's hosted pages. Your bank username, password, and MFA codes are entered with Plaid (or your bank) and never pass through Mintro or any agent. By connecting a bank you agree that Plaid may process your information in accordance with Plaid's End User Privacy Policy. Mintro stores the access token Plaid issues, encrypted, to fetch your transactions, and deletes it once Plaid confirms the bank is removed. We use the data Plaid returns only to provide the budgeting service you asked for. We do not sell or rent it to marketers or anyone else, we do not use it for advertising, and we do not use it to build products unrelated to your budget.

Agents and API keys

Signing into the app creates a Clerk session; the app holds no API key of its own. Agents act on your budget only with an API key you (or your organization) issue, scoped to what that agent may do, and never to more than you yourself may do. Every entry records which key filed it. A key expires ninety days after its first use; rotating it mints a successor with the same name and scopes. Revoking a key ends that agent's access within about a minute. We cache key verification briefly to keep the API fast; a live event stream re-checks its key every ten minutes. Keys are managed by Clerk; Mintro never sees or stores key secrets.

The agent you connect (ChatGPT, Claude, Kimi, or another) reads your budget with your key under your own account with that provider; we do not choose that provider, contract with it, or send it anything you did not ask it to fetch. What it does with your budget once it has read it is governed by your agreement with that provider, not by this policy.

Community

Community is off unless you turn it on. When you do, your username, the line you write, the counts you choose to show, and what you post are public: anyone can read them without an account, on our public pages and through our API, and search engines may index them. If you own a Founder seat, its number is on the public Founders wall whether or not you use Community; your username appears beside it only if you put it there. Nothing from your budget is public (no amount, no account, no transaction), and the app has no way to post one. An agent posting with your key posts as you, and the post says so. Turning Community off, or deleting your account, takes your name off what you posted; the posts stay so threads stay readable, and read as "a former member". Your votes and reactions go with your account. Write to privacy@mintro.money to have a post removed outright. Your username is held by Clerk with the rest of your sign-in.

Email

Mintro emails you only about your account: a welcome when you join, a note when a bank needs you to sign in again, and a reminder before a free trial ends. These are service messages, not marketing, and we send no marketing email. They carry no tracking pixels and no tracked links. Resend delivers them. Clerk sends its own sign-in emails (codes and verification links), and Stripe may send payment receipts.

Error reports

When something breaks, a report goes to Sentry so we can fix it: what failed, where in our code, and when. It is scrubbed before it leaves: no amounts, no transaction descriptions, no bank data, no keys or tokens. We use these reports to fix bugs and for nothing else.

Payments

Billing runs on Stripe: checkout and the customer portal are Stripe's own pages. Your card details go to Stripe, never to us; we keep your Stripe customer id and which plan is active, nothing more. Stripe collects your billing address to work out sales tax.

Your rights

Your budget belongs to you. Canada's PIPEDA, Alberta's Personal Information Protection Act and, if you live in Quebec, Quebec's Law 25 give you these rights, and we give them to everyone, wherever they live:

Write to privacy@mintro.money. We answer within 30 days, and may ask you to confirm it is you before we hand anything over.

Complaints

Tell us first, at privacy@mintro.money. If our answer does not satisfy you, you can complain to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner of Alberta, or, in Quebec, the Commission d'accès à l'information.

Cookies

Essential, always on: Clerk's session cookies keep you signed in to the app (app.mintro.money), and a session-presence cookie lets mintro.money show "console" instead of "sign in".

Campaign: when you arrive from a link tagged with a campaign or an ad's click id, we keep that tag for ninety days in our own cookie (mintro_attr), so that if you buy a plan we know which campaign brought you. It holds no name, no email and nothing from a budget. A second cookie (mintro_consent) remembers your choice about ad cookies for a year.

Advertising, only if you accept: the ad tags of Google, Meta and Reddit, which set their own cookies to measure our ads. When you start a plan or buy a Founder seat, we tell Meta and Reddit that the ad you came from led to a sale (the price you paid, the ad's click id, and your email address hashed so it cannot be read back), and Google learns the same through its tag. Nothing from your budget is ever sent: no account, no amount, no transaction. Decline, and none of the ad tags load and nothing is sent.

Visits: Vercel Web Analytics counts pages viewed without cookies and without identifying you.

Security

All traffic is encrypted in transit (TLS, HTTPS enforced). Plaid access tokens are encrypted at rest with AES-256-GCM under keys that rotate; encryption keys and all secrets live in a managed secrets vault, never in code. Your bank credentials are never transmitted to or stored by Mintro in any form. Each customer's data is walled off from every other customer's inside the database itself (row-level security), on top of the checks the application makes. Linking a bank and minting or rotating an agent key each require two-step verification on your account; signing in does not. API keys are scoped per agent and verified on every request; revocation takes effect within about a minute. The signing secrets for any outbound webhooks you configure are also encrypted at rest. Who was refused, who minted or revoked a key, who unlinked a bank, who exported the budget: that record is yours to read, under Activity → Security in the app, for ninety days. If we learn of a breach that puts you at risk of serious harm, we tell you and the regulators the law names, as soon as we can. To report a vulnerability, see security.txt.

Data retention and deletion

Rows your bank sends that you never review are deleted 90 days after they arrive (30 for a bank account you never set up or left out), and a transaction you typed and never filed after 45 days. When you remove a bank, its access token, account details, balances and unreviewed rows are deleted, and its transactions stay or go as you choose. The security record above is kept for ninety days, and so is the record of what changed in your budget (Activity). Transactions in your budget, entries, and envelopes are retained as your budget until you delete them or your account.

Delete your account in the app (your profile, under Security; Settings → Your data says what it does) and the deletion starts on its own: we remove your bank connections at Plaid, end your subscription and delete your customer record at Stripe, revoke your API keys, and delete your budget and transaction data from our database. If you write to us instead, we send you a final export first. In a shared household only you leave: its budgets stay with the people still in it, and are deleted when the last of them leaves or an admin deletes the household. Your forum posts stay, with your name taken off them.

One honest caveat: our database keeps a rolling seven-day restore history, so deleted data can remain there for up to seven days after it is gone from the live service; then it is gone. Plaid keeps its own records under its End User Privacy Policy, and Stripe keeps the payment records the law requires it to keep. Every deletion request is recorded when it arrives and when it is done (ids and dates, nothing else) and is honoured within 30 days.

Service providers and where your data lives

We use these providers. Each receives only what its function requires.

Mintro is operated from Canada, but your information is stored in the United States (our database is hosted there), and most of these providers process it outside Canada and outside Quebec. There it is protected by our agreements with each provider, and it can be reached by courts and authorities under that country's laws. We assessed these transfers before launch in a written privacy impact assessment. By using Mintro you consent to that transfer.

Age

Mintro is for adults: you must be 18 or older to use it. We do not knowingly collect information from anyone younger. If you think a child has an account, write to privacy@mintro.money and we delete it.

Outside Canada

Mintro is run from Canada, and bank sync covers Canadian banks. It is not directed at people in the European Union or the United Kingdom. Anyone can use it, and the rights above are everyone's, wherever they live.

Changes to this policy

If we change this policy in a way that matters (what we collect, who receives it, or where it goes), we email you before the change takes effect and update the date at the top of this page. No change will ever let us sell your data.

What we never do

No ads. No selling or sharing your financial data. No money movement. The subscription is the whole business model.

Terms of service

The agreement

These terms are an agreement between you and Flaresoft Solutions Inc. ("Mintro", "we"), which runs Mintro. By creating an account or using Mintro (the app, the API, or an agent with your key), you accept them and the privacy policy above. Each person in a household accepts them for themselves.

Who can use Mintro

You must be 18 or older and able to make a binding contract where you live. One person per sign-in; do not share yours. Use an email address you read: it is how we reach you about your account and your bill.

Your account, your keys, your agent

You are responsible for what happens under your account. Keep your sign-in and your second factor to yourself, and write to security@mintro.money if you think someone else got in.

An API key is a password for an agent. Whoever holds it can do what its scopes allow, as you. Keep keys where others cannot read them, and revoke one you no longer trust; it stops working within about a minute.

Your agent acts for you. When ChatGPT, Claude, Kimi or any other agent uses your key, what it does (filing, editing, deleting, exporting, posting in Community) is done on your instructions and counts as done by you. You are responsible for what you ask it to do, and for checking its work. Mintro does not choose, run or answer for the agent or its provider; your agreement with them covers them.

Not financial advice

Mintro provides budgeting record-keeping, not financial advice. Nothing in Mintro (the app, the API, an agent's answer, a guide or a forum post) is financial, investment, tax or legal advice, and nobody at Mintro is your adviser. The outlook, goals, retirement projections, debt payoff dates and every other forecast are illustrations built from the numbers and rates you give; they are not predictions or promises. Check anything important with a qualified professional before you act on it.

Bank sync

Bank sync runs through Plaid and your bank, which we do not control. It covers Canadian banks. It can be late, incomplete or unavailable, and your bank may ask you to sign in again. It opens in stages and may not be available on your account yet; until it is, your agent can import your bank's export. Your plan includes a set number of bank connections; beyond that, extras are billed as listed on the pricing page. Check anything important against your bank: its records win over ours. Mintro reads transactions. It never moves money.

Acceptable use

What you post

You own what you post in Community. By posting, you give Flaresoft Solutions Inc. a worldwide, non-exclusive, royalty-free licence to host, store, copy, display and distribute it as part of Mintro (in the app, on public pages and through the API) and to keep doing so after you turn Community off or leave, with your name taken off it. The licence ends for a post when it is removed. You promise you have the right to post it, and that it follows the rules shown beside the forum: be plain, no selling. What you share about your own money is yours to decide, and nothing another member posts is advice from Mintro.

Moderation

We may hide or remove any post, and suspend or close any account, that breaks these terms or the forum's rules, puts other people at risk, or that the law requires us to act on. A moderator who removes a post says why in the thread. Three flags from members hide a post until a moderator looks. We do not review posts before they appear, and a post is the view of the person who wrote it, not Mintro's. To appeal a decision, write to support@mintro.money.

Copyright complaints

If something on Mintro uses your work without permission, write to legal@mintro.money with what the work is, a link to where it appears, your name and contact details, and a statement that you own the work or may act for its owner. We act on complete notices promptly and tell the person who posted it. Someone who keeps posting other people's work loses access.

Plans, trials and renewal

Free costs nothing and asks for no card. Plus and Household are subscriptions, billed monthly or yearly; Founder is one payment. Prices are on the pricing page.

Plus and Household start with 30 days free. Checkout takes a card. If you have not cancelled when the 30 days end, the subscription starts and your card is charged for the first period, plus tax. Cancel before then and you pay nothing.

Subscriptions renew on their own (each month or each year, as you chose) and your card is charged at the start of each period until you cancel. Moving between Plus and Household, or between monthly and yearly, changes the running subscription and is prorated; so is adding or dropping an extra bank. If a payment fails, Stripe tries again; if it keeps failing, the budget can move to Free. Nothing in it is deleted.

Cancelling and refunds

Cancel any time in the app: Settings → Plan → Manage billing opens Stripe's page, where you can cancel. Or write to support@mintro.money. Cancelling stops the next renewal. You keep the plan to the end of the period you paid for; then the budget moves to Free with every envelope, entry and transaction intact, and bank connections close.

Deleting your account ends any subscription at once, with no refund for the rest of the period. Cancel first if you want the time you paid for.

Taxes and price changes

Prices are in US dollars and do not include tax. Stripe adds the sales tax that applies ( GST/HST, PST or QST in Canada, or your local equivalent) from your billing address, and shows it before you pay. We may change our prices. A new price reaches your subscription only at a renewal at least 30 days after we email you about it; if you do not accept it, cancel before that renewal.

Founder seats

A Founder seat is one payment of $500, plus tax, for everything in Household for the life of the Mintro service: for as long as Flaresoft Solutions Inc., or whoever it passes Mintro to, runs it. It is never billed again for its plan, whatever prices do. Extra banks beyond the plan's allowance are billed like anyone else's.

The seat belongs to the budget owner that bought it (your own account or your household), not to one person. It cannot be sold, transferred or split, and it is not a share, an investment or a claim on the company. Its number is on the public Founders wall; your username appears beside it only if you put it there.

If Mintro ever shuts down, we email you at least 90 days before it does, and export keeps working until the last day, so your budget leaves with you. A seat can be closed, like any account, for a serious breach of these terms.

Your data

Your budget is yours. You let us store and process it only to run Mintro for you, as the privacy policy says. You may export your budget and leave at any time.

Availability and changes to Mintro

We work to keep Mintro running and your data safe, but we cannot promise it will always be available, fast or free of errors. We may change, add or remove features. If we remove something a paid plan includes, we tell you first, and you may cancel and have the unused part of a yearly plan refunded. If Mintro ever shuts down, we email everyone at least 90 days before, and export works until the last day.

No warranty

Where the law allows, Mintro is provided as is and as available, without warranties of any kind, express or implied, including that it is fit for a particular purpose, accurate or uninterrupted. Some laws, such as Quebec's Consumer Protection Act, give you warranties that cannot be excluded; nothing in these terms takes those away.

Limits on liability

Where the law allows, Flaresoft Solutions Inc. is not liable for indirect, incidental, special, consequential or punitive damages, for lost profits or savings, or for decisions you or your agent make from what Mintro shows. Our total liability for any claim about Mintro is limited to the greater of what you paid us in the 12 months before the claim (for a Founder seat, what you paid for it) and US$50.

This does not limit liability the law does not allow to be limited, such as for gross negligence, intentional fault, or injury to a person.

Claims you cause

If you break these terms or the law through Mintro, or post something you had no right to post, and someone makes a claim against us because of it, you are responsible for the reasonable losses and costs that follow, only as far as the consumer law where you live allows.

Suspension and closing

You can stop using Mintro and delete your account at any time. We may suspend or close an account that abuses the service, breaks these terms, is used for fraud, puts other people's data at risk, or that the law requires us to close. Unless the law or the risk forbids it, we tell you why and give you time to export first. If we close a paid account for no fault of yours, we refund the unused part.

Changes to these terms

We may update these terms. For a change that affects your rights or what you pay, we email you the new text at least 30 days before it takes effect. If you do not accept it, you may cancel before then, and a yearly plan is refunded for the unused months. Otherwise the new terms apply from that date. The date at the top of this page is the last change.

Governing law

These terms are governed by the laws of Alberta and the federal laws of Canada that apply there, and disputes go to the courts of Alberta. If you are a consumer, you keep the protection of the consumer laws where you live, and may bring a claim in your local courts where those laws allow it.

The rest

These terms and the privacy policy are the whole agreement between you and us about Mintro. If a court finds part of them unenforceable, the rest stands. If we do not enforce a term at once, we have not given it up. We may transfer these terms to whoever takes over Mintro; you may not transfer yours. Neither of us is responsible for delays caused by events outside reasonable control.

Contact

Flaresoft Solutions Inc., 5005 Dalhousie Dr NW, Unit 175 #1497, Calgary, Alberta T3A 5R8, Canada. Terms and copyright: legal@mintro.money. Privacy: privacy@mintro.money. Billing and help: support@mintro.money. Security: security@mintro.money.

We do not move money. We are not a bank.