How your data is handled

Where your data goes

Bank sign-in happens through Plaid or your financial institution. Montley does not receive or store your bank login credentials.

During a sync, Montley receives transaction and balance updates from Plaid and writes them to your selected Google Sheet. It may also read existing Sheet data to avoid duplicates, apply updates, or repair its expected structure.

Transaction details and balance amounts ordinarily stay in application memory while that work runs. Montley does not put them in application logs, analytics, or task-queue messages. Optional Telegram delivery is the limited storage exception explained below.

What Montley keeps

Automatic syncing needs some information between updates. Montley retains:

• Your account and spreadsheet information: your Google profile, connected Sheet identifiers and titles, ownership, and collaborator permissions. Google access and refresh tokens are encrypted at rest.
• Bank connection information: encrypted Plaid access tokens, institution and account names, account identifiers and masks, connection status, and sync progress. Montley keeps when a balance was delivered, but not its amount.
• Service records: billing status and Stripe identifiers, invitations, and operational metadata. Stripe handles payment details; Montley does not store your full card number.

Product analytics includes sanitized page paths, setup milestones, and aggregate sync counts. It does not include transaction details, balances, bank account details, or Sheet contents.

These records support the service and have their own retention rules. See information we process and retention and deletion in the privacy policy.

Optional Telegram delivery

Connecting a Telegram group turns on separate messages for newly synced transactions and later amount changes. Montley temporarily stores an encrypted copy of the selected transaction details so delayed deliveries can be retried. Large updates arrive gradually to respect Telegram's sending limits.

• While delivery is pending: the copy can include the date, description, amount, currency, account name and mask, and institution name. Amount-change messages also include the previous amount.
• After delivery: Montley clears the copy from its active database after successful delivery, permanent failure, disconnection, or expiration, and always within 24 hours. Protected backups may retain an encrypted copy until the backup expires.
• In Telegram: delivered messages follow Telegram's retention practices and your controls there. Current or future group members may be able to see them. Montley's 24-hour limit does not delete messages from Telegram.

Montley also keeps encrypted group identifiers and titles, along with delivery status and related metadata. Turning off notifications stops future delivery and clears pending copies from the active database.

Your controls

• Disconnect a bank in Montley: future syncs stop, Montley asks Plaid to remove the connection, and related active connection records are deleted. Rows already in your Sheet remain there.
• Revoke Google access: use your Google Account connections to stop Montley from accessing your Sheet. This does not delete the Sheet or your Montley account records.
• Disconnect Telegram: use the Montley dashboard to stop notifications. Manage or delete messages already delivered through Telegram.
• Manage your financial history: view, edit, export, share, or delete it directly in Google Sheets. People with access to that Sheet can see its contents according to the permissions you set.
• Request account deletion: email hello@montley.app from your account email. Montley verifies the request and coordinates any connected Sheets or subscriptions with you. Your Google Sheet is not deleted; some records may remain for legal obligations or until protected backups expire.

Read the full privacy policy for provider practices, complete retention details, and your privacy rights.