Court filing
Exhibit E — In re Plaid Inc. Privacy Litigation (Dkt. 113-6, N.D. Cal. No. 4:20-cv-03056)
Filed December 11, 2020 in In re Plaid Inc. Privacy Litigation; one of 174 filings from this case.
Record facts
| Court | U.S. District Court for the Northern District of California |
|---|---|
| Filed | 2020-12-11 |
U.S. District Court for the Northern District of California · No. 4:20-cv-03056-DMR · Doc. 113-6 · 2020-12-11 · Docket on CourtListener
Full text
EXHIBIT E
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 1 of 30
12/11/2020
IN TERN gr •• CH IV Ii
https:/lplaid.com/lega[/
m1uuaehmoimno
1,528 caetu,es
10()(:12014-11[}e(:2020
®PLAID
Legal -
> Overview
End User Privacy
> Policy
Politique de
> protection de la
confidentialite
> Privacy Statement
> Developer Policy
Products .....
Legal - Plaid
Use cases ....
Docs ....
Pricing
About us ....
Log in I Get API keys
> I
Overvievv
As with everything we do, we have tried to simplify a
complex process and make our legal documents as reader-
friendly as possible. However, (contrary to the simplicity of
our API) some complexities persist in these documents. As
you read and have questions, please do not hesitate to
contact us.
End User Privacy
Policy
Effective Date: June 14, 2018
Privacy and security are very important to us at Plaid. This
Privacy Policy is meant to help you understand how we
collect, use, and share end user information in our
possession to operate, improve, develop, and protect our
services, and as otherwise outlined in this Policy. Please
take some time to read this Policy carefully.
Jump to section:
First, Some Background
Our Data Practices
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
1/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 2 of 30
12/11/2020
INT£ R NIT A•C HI V[
https://plaid.com/legal/
m11osenmocmno
1..lli..e,etu,es
10 ()ct 2014 . 11 Doc 2020
Legal - Plaid
• Information We Collect
• How We Use Your Information
• How We Share and Store Your Information
Some Last Details ...
First, Some Background
A quick note about Plaid
Our mission at Plaid is to empower innovators by delivering
access to the financial system. Our technology provides an
easy way for you (the "end user") to connect your bank
account and other financial accounts to software applications
that can help you do things like save for retirement, manage
your spending, streamline credit applications, or transfer
money. These software applications are built and provided
by our business customers (we'll call them "developers"
here), and powered by Plaid. By delivering access to high-
quality, usable financial account data that we've translated
and standardized, we enable our developers to focus on
building experiences that benefit you.
About this Privacy Policy
Our goal with this Policy is to provide a simple and
straightforward explanation of what information Plaid collects
from and about end users, and how we use and share that
information. While we generally rely upon our developers to
inform you about the services we provide to the developer,
and also to provide notice and obtain any necessary consent
for us to process your information, we value transparency
and want to provide you with a clear and concise description
of how we treat your information.
Please note that this Policy only covers the information that
Plaid collects, uses, and shares, and it does not explain what
our developers do with any end user information we provide
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
2/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 3 of 30
12/11/2020
~
laid.com/legal/
1~utures
100cl2014 - 11 Doc2020
Legal - Plaid
to them (or any other information they may collect about you,
their end user). This Policy also does not cover any
websites, products, or services provided by others. We
encourage you to review the privacy policies or notices of
our developers or those third parties for information about
their practices.
Our Data Practices
Information We Collect
Information you provide. When you connect your financial
accounts with a developer application, you may provide,
through our integrated services, login information required by
your financial institution to access your account, such as
your username and password, answers to challenge
questions, or a security token. When providing this
information, you give the developer, and Plaid as its service
provider, the authority to act on your behalf to access and
transmit your information from the relevant financial
institution.
Information collected from your financial
institutions. The information we receive from the financial
institutions that maintain your financial accounts may vary
depending on the specific Plaid services our developers use
to power their applications, as well as the information made
available by your financial institutions. The types of
information we collect from your financial institutions may
include, but are not limited to:
• Account information, including financial institution name,
account name, account type, and account and routing
number;
• Information about an account balance, including current
and available balance;
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
3/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 4 of 30
12/11/2020
l"'l.~IT ••CHIVt
https:/!plaid.com/legal/
mg,09ehmoimno
1~etu,es
10 Qct 2014. 11 Doc 2020
Legal - Plaid
• Information about credit accounts, including statement
due dates and balances owed, payment amounts and
dates, transaction history, and interest;
• Information about loan accounts, including due dates,
balances, payment amounts and dates, interest, loan
type, payment plan, and term;
• Information about the account owner(s), including name,
email address, phone number, and address information.
• Information about account transactions, including amount,
date, type, and a description of the transaction.
The data may include information from all your sub-accounts
(e.g., checking, savings, and credit card) accessible through
a single set of account credentials, even if only a single sub-
account is designated by you.
Information received from your devices. Our technology
is embedded in our developers' applications. When you use
your device to connect to our services through a developer
application, we receive information about that device,
including IP address, hardware model, operating system,
and other technical information about the device. We may
also use cookies or similar tracking technologies to collect
usage statistics and to help us improve our services.
Information we receive about you from other
sources. We may receive information about you directly
from the relevant developer or other third parties, including
service providers and identity verification services.
How We Use Your Information
We use the information we collect to operate, improve, and
protect the services we provide to our developers, and to
develop new services. More specifically, we use your
information:
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
4/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 5 of 30
12/11/2020
l"'l.~IT ••CHIVt
https:/!plaid.com/legal/
mg,09ehmoimno
1~etu,es
10 Qct 2014. 11 Doc 2020
Legal - Plaid
• To operate, provide, and maintain our services;
• To improve, enhance, modify, add to, and further develop
our services;
• To protect you, our developers, our partners, or Plaid from
fraud, malicious activity, and other privacy and security-
related concerns;
• To develop new services;
• To provide customer support to our developers, including
to help respond to your inquiries related to our service or
our developers' applications;
• To investigate any misuse of our service or our
developers' applications, including violations of our
Developer Policy, criminal activity, or other unauthorized
access to our services; and
• For any other purpose with your consent.
How We Share and Store Your Information
We take deliberate steps designed to protect end user
information in our possession. These steps include, but are
not limited to, maintaining information security controls such
as data encryption, firewalls, logical and physical access
controls, and continuous monitoring. These controls are
regularly evaluated for effectiveness against industry-
standards internally and by independent security auditors.
We do not sell or rent end user information to marketers or
other third parties. But we do share end user information with
third parties as described in this Policy. For example, we
share your information with the developer of the application
you are using and as directed by that developer (such as
with another third party if so directed by you). We may also
share your information:
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
5/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 6 of 30
12/11/2020
~
laid.com/legal/
1~utures
100ct2014 - 11 Dec2020
Legal - Plaid
• With your consent;
• With our service providers, partners, or contractors in
connection with the services they perform for us or our
developers;
• If we believe in good faith that disclosure is appropriate to
comply with applicable law, regulation, or legal process
(such as a court order or subpoena);
• In connection with a change in ownership or control of all
or a part of our business (such as a merger, acquisition,
reorganization, or bankruptcy);
• Between and among Plaid and our current and future
parents, affiliates, subsidiaries and other companies
under common control and ownership; or
• As we believe reasonably appropriate to protect the rights,
privacy, safety, or property of you, our developers, our
partners, or Plaid.
We may collect, use, and share information we collect in an
aggregated or de-identified manner (that does not identify
you personally) for any purpose permitted under applicable
law. This includes creating or using aggregated or de-
identified data based on the collected information to develop
new services and to facilitate research.
We retain information we collect about you for as long as
necessary to fulfill the purposes outlined in this Policy, unless
a longer retention period is required or permitted under
applicable law, regulation, or contract. As permitted under
applicable law, even after you stop using an application or
terminate your account with our developers we may still
retain your information (for example, if you still have an
account with another developer or if there is residual
information within our databases or systems); however, your
information will only be used and shared as required by law
or in accordance with this Policy.
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
6/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 7 of 30
12/11/2020
Legal - Plaid
lhttps:1/plaid.com/legal/
I~
DEC
FEB
1~,52~8ca~ e,~u,e~s ~---------------.~ ... <Ill I
~
1ooc12014.11 ooc2020
1 • • 1 •
1U ,I
2017
1 '
2020
Some Last Details ...
Changes to This Policy
We may change this Privacy Policy from time to time. If we
make changes, we will post the new policy on Plaid's
website at plaid.com/legal and update the effective date at
the top of this Policy. We will also notify our developers of
any material changes in accordance with our developer
agreements, as they are generally best positioned to notify
their end users about such changes to this Policy, as
appropriate.
Contacting Plaid
Our full company name is Plaid Inc., and you can contact us
at:
Plaid Inc.
P.O. Box 636
San Francisco, CA 94104
Attn: Legal
grivacy:@glaid.com
Please note: In certain jurisdictions, you may have the right
to obtain access to any personal information of yours that is
under the control of an organization. We encourage you to
reach out directly to the developer or provider of the
application you are using with any questions about the
developer's services, access to your personal information, or
about our relationship with that developer. We work with our
developers to respond to inquiries that relate to us, our
services, or our data practices, and may share any
communications we receive from you or your contact
information with the applicable developer to respond to such
inquiries.
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
7/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 8 of 30
12/11/2020
IN •~•N lT ~•CH IV~
mu1uaehmgnhinQ
Legal - Plaid
lhttps://plaid.com/legal/
I [QQJ DEC
FEB
1~52~8c~ao-ture-s ~---------------~
.... <t11
I
Ii"
100ct 2014 . 11 0ec2020
I •• I •
IY 11
2017
I
'
2020
Politique de
protection de la
confidentialite
Date d'entree en vigueur : le 14 juin 2018
Plaid attache une grande importance a la confidentialite et a
la securite. Cette Politique de confidentialite vise a vous
aider a comprendre, entre autres methodes decrites dans les
presentes, comment nous recueillons, utilisons et
communiquons !'information sur l'utilisateur final que nous
detenons, dans le but d'executer, d'ameliorer, de developper
et de proteger nos services. Nous vous prions de prendre le
temps de la lire attentivement.
Passez a la section:
Un peu de contexte pour commencer
Comment nous traitons les donnees
• Information gue nous recueillons
• Usag§__Que nous faisons de vos renseignements
Comment nous communiguons et stockons vos
• renseignements
Quelgues derniers petits details ...
Un peu de contexte pour commencer
Un petit mot au sujet de Plaid
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
8/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 9 of 30
12/11/2020
I NT~ II N ~T A O C II I V ~
momehffi9U~inQ
Legal - Plaid
lh1tps://plaid.com/legalf
I ~
DEC
FEB
1~,52~Bc~ao-ture- s ~---------------~
....
... I
~
100ct2014-11 Dac2020
1 111
111
1 111
1W 11
2017
I
'
2020
~ ® O I
•'·'· .~ C1
Plaid se fixe pour mission d'autonomiser les innovateurs en
leur assurant un acces au systeme financier. Notre
technologie vous offre (a titre d' « utilisateur final ») un moyen
facile de relier votre compte bancaire et vos autres comptes
financiers a des applications logicielles qui peuvent vous
aider a, par example, epargner en vue de la retraite, gerer
vos depenses, simplifier vos demandes de credit, ou
transferer des fonds. Plaid est le moteur de ces applications
logicielles, qui sont creees et fournies par nos clients
commerciaux (nous les designons ici sous le nom de «
developpeurs » ). Nous assurons l'acces a des donnees
financieres utilisables et de grande qualite, que nous
traduisons et normalisons en vue d'aider nos developpeurs a
se concentrer sur !'elaboration d'une experience dont vous
tirerez profit.
Concernant cette Politique de confidentialite Nous voulons
dans cette Politique donner une explication simple et directe
de la nature de !'information que Plaid recueille aupres des
utilisateurs finaux, et a leur sujet, ainsi que de nos methodes
d'utilisation et de communication de cette information. Si
nous faisons generalement appel a nos developpeurs pour
vous tenir informes des services que nous fournissons a ces
derniers, et aussi pour communiquer des avis et obtenir les
consentements qui nous sont necessaires pour traiter vos
donnees, nous avons la transparence a coour et nous tenons
a decrire clairement et en peu de mots comment nous
traitons vos donnees.
Notez que cette Politique porte uniquement sur !'information
que Plaid recueille, utilise et transmet, sans expliquer l'usage
que font nos developpeurs de toute donnee sur un utilisateur
final que nous leur transmettons (ou autre information qu'ils
peuvent recueillir au sujet de cet utilisateur final, c'est-a-dire
vous-meme ). Cette politique ne traite pas non plus des sites
Web, produits ou services fournis par d'autres. Nous vous
invitons a passer en revue les politiques ou avis de
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
9/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 10 of 30
12/11/2020
Legal - Plaid
lhttps://plaid.com/legal/
I~
DEC
FEB
1~ 52~8c~ae-tu,e~s ~---------------~
....
... I
II>
10 Qct 2014 - 11 Doc 2020
1 • • 1 • ... 1 I
2017
I
'
2020
confidentialite de nos developpeurs ou des tierces parties en
cause afin de vous mettre au courant de leurs fac;ons de
faire.
Comment nous traitons les donnees
Information que nous recueillons
L'information que vous fournissez: lorsque vous reliez
vos comptes financiers a !'application d'un developpeur,
vous pouvez faire appel a nos services integres pour
communiquer les donnees de connexion dont votre
institution financiere a besoin pour acceder a votre compte
(nom d'utilisateur et mot de passe, reponses a des questions
d'identification, jeton de securite, etc.). Quand vous donnez
cette information, vous accordez au developpeur (et a Plaid
en sa qualite de fournisseur de services) le pouvoir d'agir en
votre nom pour acceder a vos renseignements depuis
!'institution financiere en cause, et les transmettre.
L'information recueillie aupres de vos institutions
financieres: la nature de !'information que nous envoient les
institutions financieres detenant vos comptes financiers varie
en fonction des services particuliers de Plaid dont se servent
nos developpeurs pour leurs applications, de meme que de
!'information mise a notre disposition par vos institutions
financieres. Les types d'information que nous recueillons
aupres de vos institutions financieres peuvent comprendre,
notamment, mais non limitativement:
• de !'information sur le compte (nom de !'institution
financiere, nom du compte, type de compte, numero de
compte et d'acheminement, etc.);
• de !'information sur le solde du compte, notamment le
solde actuel et le solde disponible;
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
10/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 11 of 30
12/11/2020
Legal - Plaid
lhttps://plaid.com/legal/
I @Q] DEC
FEB
1~,52-8c~aet-u,e-s ~---------------~
....
... I
IJ>
100cl 2014-11Doc2020
1 • •
1 •
1M ,I
2017
I
'
2020
• de !'information sur les comptes de credit, notamment
dates d'echeance et solde dO dans les releves, montants
et dates des paiements, historique des operations, et
interets;
• de !'information sur les comptes de pret, notamment dates
d'echeance, soldes, montants et dates des paiements,
interets, type de pret, mode de paiement, et duree du
pret;
• de !'information sur le ou les detenteurs du compte (nom,
adresse courriel, numero de telephone, adresse, etc.);
• de !'information sur les operations du compte, notamment
le montant, la date et le type, et une description de
!'operation.
Les donnees peuvent comprendre de !'information sur tous
vos sous-comptes (de cheques, d'epargne, carte de credit,
etc.) accessibles au moyen d'un ensemble unique
d'identifiants de compte, meme si vous n'avez designs qu'un
seul sous-compte.
L'information envoyee par vos appareils: notre
technologie est integree aux applications de nos
developpeurs. Quand votre appareil se connecte a nos
services par une application d'un developpeur, nous
recevons des donnees sur cet appareil (adresse IP, modele
du materiel, systeme d'exploitation et autres donnees
techniques). Nous pouvons aussi faire appel a des cookies
(temoins), ou technologies de suivi semblables, pour
recueillir des donnees sur le taux d'utilisation et pour nous
aider a ameliorer nos services.
L'information a votre sujet qui nous parvient d'autres
sources: nous pouvons aussi recevoir de !'information a
votre sujet directement du developpeur en cause ou d'autres
tierces parties, notamment des fournisseurs de services et
des services de verification de l'identite.
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
11/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 12 of 30
12/11/2020
INT~ RN ~ T
A O CH IV~
mououehffi9U~in~
Legal - Plaid
lhttps://plaid.com/legal/
I [QQ] DEC
FEB
1~,52-Sc~aot-ure-s ~---------------~
.... <Iii
I
~
100ct2014-11 Dac2020
1 It It 1 •
1111 ,I
2017
I
'
2020
Usage que nous faisons de vos renseignements
Nous nous servons de !'information que nous recueillons
pour exploiter, ameliorer et proteger les services que nous
offrons a nos developpeurs, et pour en creer de nouveaux.
Plus precisement, nous faisons l'usage des renseignements
a votre sujet aux fins suivantes:
• Exploiter, fournir et maintenir nos services;
• Ameliorer, rehausser, modifier, agrandir et developper
encore davantage nos services;
• Vous proteger et proteger nos developpeurs, nos
partenaires ou Plaid contre la fraude, les actes
malveillants, et les autres problemes de confidentialite et
de securite;
• Developper de nouveaux services;
• Assurer un soutien a nos clients developpeurs, entre
autres aider a repondre a vos demandes de
renseignements sur nos services ou sur les applications
de nos developpeurs;
• Enqueter sur tout usage abusif de nos services ou des
applications de nos developpeurs, y compris sur toute
violation de notre Politique relative aux developpeurs, sur
des activites criminelles ou sur les acces non autorises a
nos services;
• A toute autre fin a laquelle vous consentez.
Comment nous communiquons et stockons vos
renseignements
Nous prenons des mesures destinees specifiquement a
proteger !'information de l'utilisateur final en notre
possession, entre autres en assurant des controles de la
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
12/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 13 of 30
12/11/2020
Legal - Plaid
lhttps://plaid.com/legal/
I~
DEC
FEB
_,~,52~8c~ae-tu,e- s ~---------------~
....
.... I
Ii>
100cl2014-11Doc2020
1 • •
1 •
1U 11
2017
I
'
2020
securite de !'information comme le cryptage de donnees, les
pare-feu, les controles d'acces logiques et physiques, et la
surveillance permanente. L'efficacite de ces controles fait
l'objet d'evaluations periodiques a l'interne en fonction des
normes de l'industrie, et par des auditeurs de securite
independants.
Nous ne vendons ni ne louons de renseignements relatifs
aux utilisateurs finaux aux specialistes du marketing ou
autres tierces parties, mais nous communiquons en fait de
tels renseignements a des tiers, comme decrit dans la
presente Politique. A titre d'exemple, nous communiquons
vos renseignements au developpeur de !'application que
vous utilisez, selon les directives de ce developpeur (par
exemple avec une autre tierce partie si vous en donnez
instruction). Nous pouvons aussi communiquer vos
renseignements :
• Avec votre consentement;
• Avec nos fournisseurs de services, partenaires ou
entrepreneurs relativement aux services qu'ils rendent a
nous ou a nos developpeurs;
• Si nous crayons de bonne foi que la divulgation s'impose
pour se conformer aux lois, reglements ou procedures
juridiques applicables (par exemple une ordonnance d'un
tribunal ou une assignation a temoigner);
• En lien avec un changement de proprietaire ou de
controle de notre entreprise, en tout ou en partie (fusion,
acquisition, reorganisation, faillite, etc.);
• Entre et parmi Plaid et ses parents, filiales et succursales
actuels et futurs, et autres entreprises sous un meme
controle et une meme propriete;
• Selan ce que nous estimons raisonnable pour proteger
vos droits, votre confidentialite, votre securite ou vos
biens, ou ceux de nos developpeurs ou partenaires, ou de
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
13/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 14 of 30
12/11/2020
~
plaid.com/legal/
1~i:2tures
10 Oct 2014 - 11 Doc 2020
Legal - Plaid
Plaid.
Nous pouvons recueillir, utiliser et communiquer les
renseignements que nous recueillons sous une forme
groupee ou anonymisee (qui ne vous identifie pas
personnellement) a toute fin autorisee par le droit applicable.
Cela comprend la creation ou !'utilisation de donnees
groupees ou anonymisees a partir de !'information recueillie
en vue d'etablir de nouveaux services et de faciliter les
recherches.
Nous conservons !'information que nous recueillons a votre
sujet aussi longtemps qu'il le taut pour repondre aux objets
enonces dans cette Politique, a mains qu'un delai de
conservation plus long soit exige ou autorise par le droit
applicable, des reglements ou un contrat. Nous pouvons,
dans le respect du droit applicable, conserver vos
renseignements meme apres que vous avez cesse d'utiliser
une application ou resilie votre compte avec nos
developpeurs (si par exemple vous avez encore un compte
avec un autre developpeur, ou s'il reste quelques
renseignements dans nos bases de donnees ou systemes );
dans ce cas, vos renseignements ne seront utilises et
communiques que dans la mesure exigee par la loi ou
conformement a cette Politique.
Quelques derniers petits details ...
Nous pouvons a !'occasion modifier cette Politique de
confidentialite. Dans ce cas, nous affichons la nouvelle
politique sur le site Web de Plaid (plaid.com/legal) et
actualisons la date d'entree en vigueur figurant au debut des
presentes. Conformement a nos ententes avec les
developpeurs, nous informons egalement ces derniers de
toute modification importante, parce qu'ils sont generalement
les mieux places pour en informer au besoin leurs
utilisateurs finaux.
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
14/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 15 of 30
12/11/2020
~laid.com/legal/
1~utures
100ct2014 - 11 Dec2020
Legal - Plaid
Modifications de cette politique
Le nom complet de notre entreprise est Plaid Inc. Voici nos
coordonnees :
Plaid Inc.
P.O. Box 636
San Francisco, CA 94104
Attn: Legal
grivacY..@Rlaid.com
Nata : dans certains ressorts, vous avez le droit d'acceder a
des renseignements personnels vous concernant, qui sont
sous le controle d'une organisation. Nous vous invitons a
prendre directement contact avec le developpeur ou
fournisseur de !'application que vous utilisez pour toute
question sur les services offerts par le developpeur, l'acces a
vos renseignements personnels ou notre lien avec ce
developpeur. Nous nous associons a nos developpeurs pour
repondre aux demandes de renseignements a notre sujet,
ou qui concernent nos services ou la fac;on dont nous
traitons les donnees, et ii peut arriver que nous
communiquions les messages que nous recevons de votre
part, ou vos coordonnees, au developpeur en cause pour
qu'il y reponde.
Privacy Statement
Effective Date: June 14, 2018
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
15/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 16 of 30
12/11/2020
INT£RN~r ARCH I V[
https://plaid.com/legal/
mg1oseYmocmno 1="'"'"·
10 ()ct 2014 - 11 Doc 2020
Legal - Plaid
Thank you for visiting and/or using Plaid!
This Privacy Statement explains the ways Plaid Inc. ("Plaid,"
"we," or "us") may collect, use, and share information about
you in connection with your access to or use of Plaid's
websites and our products and services (collectively,
"Services"), and in connection with any other information we
collect when you interact with us, except as outlined in the
paragraph below. We hope you will take some time to read
this Privacy Statement carefully.
Please note that this Privacy Statement does not apply to the
information we collect about the end users of our developers'
software applications. If you are an end user of one of our
developers' applications, we encourage you to review our
End User Privacy Policy.
Jump to section:
Our Data Practices
• Information We Collect
• How We Use Your Information
• How We Share Your Information
Other Details
• Advertising and Analyjics Services Provided bY. Others
• Your Choices
• Changes to this Statement
• Contacting Plaid
Our Data Practices
Information We Collect
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
16/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 17 of 30
12/11/2020
INTERNET AIC N IV!;
https:1/plaid.com/legal/
W9UD~eumocmno 1.,,. ca"'"'··
100d2014-11 Dec2020
Legal - Plaid
Information you provide. We collect the information you
provide directly to us, such as the information you provide
when you create a developer account, update your profile, fill
out our "contact us" forms, sign up for our emails, request
customer support, enroll in billing, execute a services
agreement, complete a compliance questionnaire, or
otherwise communicate with us. The types of information we
collect from you may include, but is not limited to, full name,
email address, company name, address, phone number,
driver's license, date of birth, taxpayer identification number,
and any other information you choose to provide.
Information we receive when you test our
technology. You may provide us with login information for
your bank account or other financial account to test and
evaluate how our technology will appear and operate in your
applications. If you test our technology in this way, we will
collect information from your financial account as further
described in our End User Privacy Policy.
Information we collect when you use our Services. When
you use our Services, we automatically collect information
about you, including:
Log Information: We collect log files when you use our
Services, which includes, but is not limited to, the type of
browser you use, access times, pages viewed, and your IP
address.
Information Collected by Cookies and Other Tracking
Technologies: We use various technologies to collect
information when you use our Services, including cookies
and web beacons. Cookies are small data files stored by
your web browser, on your hard drive, or in device memory
that help us improve our Services and your experience,
determine usage of parts and features of our Services, and
monitor for and detect potential harmful conduct. Web
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
17/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 18 of 30
12/11/2020
1 " T i• N ~ T
A • C H I Vi
wu1uaehmanmn~
Legal - Plaid
=l
http=s:/=/pla=id.c=om/l= eg=ali _______________ ~l [QQJ DEC
FEB
1~i:2tures
.... ... I
~
100ct2014,11Dec2020
1 •
11 1 11 .... I
2017
I
'
2020
beacons are electronic images that may be used in our
Services or emails and help deliver cookies, count visits, and
understand usage and campaign effectiveness.
Information we collect from other sources. We may also
collect information about you from other sources. For
example, we may collect information about you from other
members of your company, which may include your name,
email address, and date of birth.
How We Use Your Information
Examples of how we use the information we collect include:
• To operate, improve, and develop our Services;
• To verify the identity of you and other members of your
company;
• To bill developers for our Services, to transmit payment,
and for tax reporting purposes;
• To send you technical notices, updates, security alerts,
and administrative messages;
• To respond to your comments, questions, inquiries, and
customer service requests;
• To help personalize the Services experience for you;
• To communicate with you about products, services, offers,
and events offered or sponsored by Plaid, and to provide
news and other information we think may be of interest to
you;
• To monitor and analyze trends, usage, and activities in
connection with our Services;
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
18/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 19 of 30
12/11/2020
Legal - Plaid
[https://plaid.com/legal/
I~
DEC
FEB
1~,52-Bc~aet-ure-s ~----------------
.... <1111
I
...
100cl2014-11Doc2020
1 • • 1 •
1111 ,I
2017
I
'
2020
• To try to detect and prevent fraud, malicious activity, and
other illegal activities;
• To protect the rights, privacy, safety, or property of Plaid
and others; and
• For any other purpose described to you when the
information was collected.
How We Share Your Information
We may share information about you as follows, or as
otherwise described in this Privacy Statement:
• With our service providers, partners, contractors, or
vendors, including collection agencies in the event of
delinquent payments from our developers;
• If we believe in good faith that disclosure is appropriate to
comply with applicable law, regulation, or legal process
(such as a court order or subpoena), including in
connection with requests from law enforcement or other
governmental authorities;
• If we believe your actions are inconsistent with our
agreements or policies, or to protect the rights, privacy,
safety, or property of Plaid or others;
• In connection with a change in ownership or control of all
or part of our business (such as a merger, acquisition,
reorganization, or bankruptcy);
• Between and among Plaid and our current and future
parents, affiliates, subsidiaries and other companies
under common control and ownership; and
• With your consent or at your direction.
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
19/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 20 of 30
12/11/2020
UT[ a NIT A•C HI Vl
m~1uaehmocmnQ
Legal - Plaid
lhttps://plaid.corn/legal/
I ~
DEC
FEB
_~152-Bc~aet-u,e-s ~---------------.~ ... ~ I
~
100c12014.110oc2020
1 •
II 1 •
'" .I
2017
I
'
2020
We may also collect, use, and share aggregated or de-
identified information, which cannot reasonably be used to
identify you, for any purpose permitted under applicable law.
Other Details
Advertising and Analytics Services Provided by Others We
may allow third parties to provide analytics services or serve
advertisements on our behalf across the internet, including
Google Analytics, a web analytics service provided by
Google. These entities may use cookies, web beacons, and
other technologies to collect information about your use of
the Services and other websites and online services,
including your IP address, web browser, pages viewed, time
spent on pages, links clicked, and conversion information.
This information may be used by Plaid and others to, among
other things, analyze and track data, determine the
popularity of certain content, deliver advertising and content
targeted to your interests on our Services and other websites
and online services, and to better understand your online
activity. For more information about interest-based ads,
including to learn how you may be able to opt out of having
your web browsing information used for behavioral
advertising purposes, please visit
www.aboutads.info/choices. And for more information on
how Google uses your data, please visit
www.google.com/policies/privacy/partners/.
Your Choices
Developer Account Information. You may update
information you provide to us as part of your on line
developer account by logging into your account or by
contacting us.
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
20/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 21 of 30
12/11/2020
INT [ a N ~ T
A •CH I V l
m~1oaehmocmnQ
Legal - Plaid
lhttps://plaid.com/legat/
I~
DEC
FEB
1~ 52~8c~aot-u,e-s ~---------------.~ ... "4
I
....
100ct2014-11Doc2020
1 • •
1 • ,Iii ,I
2017
I
'
2020
Cookies. Most web browsers are set to accept cookies by
default. If you prefer, you can usually choose to set your
browser to remove or reject browser cookies. Please note
that if you choose to remove or reject cookies, this could
affect the availability and functionality of our Services.
Promotional or Marketing Communications. You may opt
out of receiving promotional or marketing emails from Plaid
by following the instructions in those emails. If you opt out
and are one of our developers, we may still send you non-
promotional emails, such as those about your account or our
ongoing business relations.
Access to Your Information. In certain jurisdictions, you
have the right (i) to know if we have collected information
about you under this Privacy Statement, (ii) to request
access to the personal information we have in our custody
and control (subject to certain legal limitations), and (iii) to
have the right to have it corrected or annotated if you believe
there are any errors in your personal information. As
described above, if you are one of our developers, you can
conveniently access your online account information by
logging into your account or by contacting us. To obtain
access to personal information, please contact us at the
contact information provided below. We may require
additional information to verify your identity, which will only
be used for that purpose.
Changes to this Statement
We may change this Privacy Statement periodically. If we
make changes, we will notify you by updating the effective
date at the top of the Statement. We may also provide notice
of any changes through other means, such as placing a
notice on our homepage or sending you an email. We
encourage you to review the Privacy Statement whenever
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
21/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 22 of 30
12/11/2020
~
laid.com/legal/
1,~§ .... !~~J~tures
10 Oct 2014 - 11 Doc 2020
Legal - Plaid
you access the Services or otherwise interact with us to stay
informed about our data practices and the choices available
to you.
Contact Plaid
If you have any questions about this Privacy Statement,
please contact us at:
Plaid Inc.
P.O. Box 636
San Francisco, CA 94104
Attn: Legal
grivacY..@glaid.com
Developer Policy
Effective Date: May 15, 2018
This Developer Policy ("Policy") provides rules and
guidelines that govern access to or use by our developers
("you" or "your") of the Plaid API, websites ("Site"),
dashboards, related tools, and other products or services
(collectively, the "Service") provided by Plaid Inc. ("Plaid,"
"we," or "us"). Any violation of this Policy may result in
suspension or termination of your access to the Service
and/or access to end users' personal and financial
information ("End User Data").
By accessing and using the Service, you agree to comply
with all the terms of this Policy. This Policy will apply each
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
22/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 23 of 30
12/11/2020
IN •~•N lT ~•CH IV~
mu1uaehmann1nQ
Legal - Plaid
=l
http=s://=pla=id.co=m/l=eg~ali _______________
~I CQQJ DEC
FEB
1~P-tures
.... "'ii I
Ii"
100ct 201 4 - 11 Doc2020
1 • • 1 I .... ,
2017
I
'
2 0 20
time you access or use the Service. If you are agreeing to
the terms of this Policy on behalf of an organization or entity,
you represent and warrant that you are so authorized to
agree on behalf of that organization or entity. This Policy is
important; please read it carefully.
We may change this Policy at any time in our discretion. If
we make any change to this Policy that we deem to be
material, we will make a reasonable effort to inform you of
such change. If you don't agree with the change, you are
free to reject it; unfortunately, that means you will no longer
be able to use the Service.
Jump to section:
Registration
ComP-liance with AP-P-licable Law
SecuritY.
Data Storag§.
Customer Service
Account Deactivation
Prohibited Conduct
SusP-ension and Termination
ReP-orting Violations
Miscellaneous
Registration
To sign up for the Service, you must create an account
("Account") by registering on our Site and providing true,
accurate, and complete information about yourself and your
use of the Service. You agree not to misrepresent your
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
23/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 24 of 30
12/11/2020
Legal - Plaid
lhttps://plaid.com/legal/
I~
DEC
FEB
1~ 52~8c~aet~u,e~s ~---------------.~ ...
... I
II>
10 Qct 2014 - 11 Doc 2020
1 • • 1 • ... 1 I
2017
I
'
2020
identity or any information that you provide for your Account,
and to keep your Account information up to date at all times.
It is your responsibility to maintain access to your Account;
you may never share your Account information, including
your password and Client Secret, with a third party or allow
any other application or service to act as you.
If you become aware of any unauthorized use of your
Account or any other breach of security, please immediately
notify us via email to security@plaid.com.
Compliance with Applicable Law
When using the Service, you must abide by all applicable
local, state, national, and international laws and regulations.
You also confirm that you, your business, your employees,
your service providers, and any others acting on your behalf
adhere to all applicable laws and regulations, especially
those pertaining to financial and personally-identifiable data.
You are solely responsible for ensuring that your use of the
Service is in compliance with all laws and regulations
applicable to you.
Security
You are responsible for securely maintaining your
authentication credentials, including your Client Identification
Number ("Client ID") and Client Secret. You must notify us
immediately in the event of any breach of security or
unauthorized use of your Account or any End User Data. You
must never publish, distribute, or share your Client ID or
Secret, and must encrypt this information in storage and
during transit.
Your systems and application(s) must handle End User Data
securely. With respect to End User Data, you should follow
industry best practices but, at a minimum, must perform the
following:
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
24/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 25 of 30
12/11/2020
~plaid.com/legal/
1~P.:tures
10 Oct 201-4 - 11 Dec 2020
Legal - Plaid
• Maintain administrative, technical, and physical
safeguards that are designed to protect the security,
privacy, and confidentiality of End User Data.
• Use modern and industry standard cryptography when
transmitting any End User Data.
• Maintain reasonable access controls to ensure that only
authorized people have access to any End User Data.
• Monitor your systems for any unauthorized access. Patch
vulnerabilities in a timely fashion. Log and review any
events suggesting unauthorized access.
• Plan for and respond to security incidents.
• Comply with relevant rules and regulations with regard to
the type of data you are handling, such as the Safeguards
Rule.
Data Storage
Unless otherwise agreed in writing with Plaid, you agree to
only store all End User Data in the locations in which you
operate. Any End User Data in your possession must be
stored securely and in accordance with applicable laws and
regulations.
Customer Service
You, and you alone, are responsible for providing all
customer service to your end users for any and all issues
relating to your product and services, including but not
limited to issues relating to your use of the Service.
Account Deactivation
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
25/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 26 of 30
12/11/2020
11< ri;•Ntr "• c ", v"
https:1/plaid.com/legal/
W9gDgchmoimno 1.,,. c•"'"'"·
100<:12014-11 Dac2020
Legal - Plaid
Once you stop using the Service in accordance with any
applicable agreement you may have with us, you may
deactivate your Account by following the instructions on the
Site. We may also deactivate your Account if you have
ceased using the Service for three months; your applicable
agreement with us terminates or expires; or as reasonably
necessary under applicable law. After your Account
deactivation, we will deprovision your access to all End User
Data associated with your integration.
Even after your Account deactivation, we may still retain any
information we collected about you for as long as necessary
to fulfill the purposes outlined in our privacy policy/statement,
or for a longer retention period if required or permitted under
applicable law.
Prohibited Conduct
You agree not to, and agree not to assist or otherwise enable
any third party to:
• access or use the Service or End User Data for any
unlawful, infringing, threatening, abusive, obscene,
harassing, defamatory, deceptive, or fraudulent purpose;
• collect and store end user's bank credentials and/or End
User Data other than as required to access or use the
Service, as authorized by the end user, as permitted by
Plaid, and as permitted under applicable law;
• use or disclose any "nonpublic personal information" (as
defined under the Gramm-Leach-Bliley Act) received from
Plaid for any purpose not permitted under applicable law;
• access or use the Service or access, transmit, process, or
store End User Data in violation of any applicable privacy
laws or in any manner that would be a breach of contract
or agreement with the applicable end user;
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
26/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 27 of 30
12/11/2020
~plaid.com/legal/
1~i:2tures
100ct2014 - 11 Ooc2020
Legal - Plaid
• access or use the Service to infringe any patent,
trademark, trade secret, copyright, right of publicity, or
other right of any person or entity;
• access or use the Service for any purpose other than for
which it is provided by us, including for competitive
evaluation, spying, creating a substitute or similar service
to any of the Service, or other nefarious purpose;
• scan or test (manually or in an automated fashion) the
vulnerability of any Plaid infrastructure without express
prior written permission from Plaid;
• breach, disable, interfere with, or otherwise circumvent
any security or authentication measures or any other
aspect of the Service;
• overload, flood, or spam any part of the Service;
• create developer accounts for the Service by any means
other than our publicly-supported interfaces (e.g., creating
developer accounts in an automated fashion or otherwise
in bulk);
• transfer, syndicate, resell, or otherwise distribute the
Service or End User Data without express prior written
permission from Plaid;
• decipher, decompile, disassemble, copy, reverse
engineer, or attempt to derive any source code or
underlying ideas or algorithms of any part of the Service,
except as permitted by applicable law;
• modify, translate, or otherwise create derivative works of
any part of the Service;
• access or use the Service or End User Data in a manner
that violates any agreement between you or the end user
and Plaid; or
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
27/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 28 of 30
12/11/2020
INT l • N ~ T
A • C II I V l
m~1oaehmoimn~
Legal - Plaid
]https://plaid.corn/legat/
I@£] DEC
FEB
1~s,~
ec~aet-u,e-s ~---------------.~ ... <Ill I
IIJ,
100ct2014-11Dec2020
1 • •
1 •
... ,I
2017
I
'
2020
~ ® O I
I] Cl
• access or use the Service or End User Data in a manner
that violates any applicable law, statute, ordinance, or
regulation.
Suspension and Termination
We reserve the right to withhold or refuse access to the
Service and/or End User Data in whole or in part where we
believe the Service is being accessed or used in violation of
this Policy or any other Plaid agreement, including Plaid's
agreements with any third party partners or data sources of
Plaid (each, a "Partner"), or where use would pose a risk to
an end user, any Partner, or Plaid itself.
We will use reasonable efforts to notify you via email or other
method when deciding to suspend or terminate access to the
Service and/or End User Data. We may immediately
suspend or terminate access without notice if appropriate
under the circumstances, such as when we become aware
of activity that is a violation of any applicable law or that
exposes Plaid, its infrastructure, data, or Service, or any
Partner to harm, including reputational harm.
Plaid will not be liable for any damages of any nature
suffered by you or any third party resulting from Plaid's
exercise of its rights under this Policy or under applicable
law.
Reporting Violations
If any person becomes aware of a violation of this Policy, we
request that you immediately notify us via email to
legalnotices@plaid.com. We may take any appropriate
action -- including reporting any activity or conduct that we
suspect violates the law to appropriate law enforcement
officials, regulators, or other appropriate third parties -- in our
sole discretion in respect to such violations.
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
28/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 29 of 30
12/11/2020
INTlaN!;TA•CIIIVl
mg1oaehmoimn~
Legal - Plaid
lhttps://plaid.com/legal/
I~
DEC
FEB
1~s,~8c~ae-tu,e-s ~---------------~
....
.... I
~
100ct2014-110ec2020
1 •
•
1 •
... ,I
2017
I
'
2020
Miscellaneous
The failure by you or Plaid to exercise in any respect any
right provided for herein shall not be deemed a waiver of any
further rights hereunder.
If any provision of this Policy is found to be unenforceable or
invalid, that provision shall be limited or eliminated to the
minimum extent necessary so that this Policy shall otherwise
remain in full force and effect and enforceable.
https://web.archive.org/web/20190101181607/https:/plaid.com/legal/
29/29
Case 4:20-cv-03056-DMR Document 113-6 Filed 12/11/20 Page 30 of 30File and source
- File
- gov.uscourts.cand.359040.113.6.pdf
- Size
- 30,680,027 bytes
- SHA-256
- bd78409b8e23d91139a59d71b54e6efdf50613195ed21c7cab85eddb4b794ce9
- Original
- PACER (login required)