Get Started
Data Governance

Compliance & Data Governance

How we handle your data, who processes it, and your rights as a user. No fine print buried in legalese — just facts.

Compliance Frameworks

Almighty adheres to the following data protection frameworks:

GDPR

General Data Protection Regulation (EU). Users have the right to access, rectify, port, and delete their personal data. We process data under legitimate interest and explicit consent.

CCPA

California Consumer Privacy Act. California residents have the right to know what personal data we collect, request deletion, and opt out of data sales. We never sell personal data.

SOC 1/2/3

Our infrastructure provider (Google Cloud / Firebase) maintains SOC 1, SOC 2, and SOC 3 compliance.

Data Retention & Deletion

Active Accounts

  • Financial data retained while your account is active
  • Transaction history kept for as long as you use the service
  • You can export your data at any time from Settings
  • Anonymized, aggregated data used for product analytics

Account Deletion

  • Request deletion from Settings → Account → Delete Account
  • ALL personal and financial data permanently removed
  • Plaid connections instantly revoked
  • Completed within 30 days of request
  • Purged from live systems immediately; encrypted backups rotate out within 30 days

Subprocessors

These third-party services process data on our behalf. Each is bound by data processing agreements.

ServicePurposeLocation
Google Cloud / FirebaseApplication hosting, database, authentication, cloud functionsUnited States
PlaidBank account linking and transaction data retrievalUnited States
RevenueCatSubscription management and in-app purchase processingUnited States
SentryError monitoring and crash reporting (anonymized)United States
VercelWebsite hosting and deploymentUnited States
ConvertKitEmail communications and waitlist managementUnited States

Your Rights

Right to Access

Request a copy of all personal data we hold about you.

Right to Rectification

Request correction of inaccurate personal data.

Right to Deletion

Request permanent deletion of all your data.

Right to Portability

Export your data in a machine-readable format.

Right to Restriction

Request we limit processing of your data.

Right to Object

Object to processing based on legitimate interest.

To exercise any of these rights, contact us at support@urbanpx.com. See our Privacy Policy for full details.