Last updated: April 12, 2026
This policy describes how CyriLiNa.IT LLC retains, manages, and deletes your personal and financial data in SharkFinEnhance™. We are committed to data minimization and only retain information necessary to provide our services.
When you run SharkFinEnhance™ on your own infrastructure, all data is stored on your servers. You are fully responsible for data retention, backup, and deletion. This policy describes our recommendations for self-hosted users and the mandatory practices for our hosted service.
When you use our hosted service, we manage your data according to the retention schedule below. All data is encrypted at rest and subject to our security controls.
| Data type | Retention | Deletion trigger |
|---|---|---|
| Account credentials | Until account deletion | User request |
| User profile | Until account deletion | User request |
| Plaid® connections | Until disconnected | User disconnects or deletes account |
| SimpleFIN® connections | Until token revoked | User revokes or deletes account |
| SnapTrade™ connections | Until disconnected | User disconnects or deletes account |
| Transaction history | Until account deletion | Account deletion |
| Investment holdings | Until account deletion | Account deletion |
| Categories & budgets | Until account deletion | Account deletion |
| Bills & savings goals | Until account deletion | Account deletion |
| Login history | 90 days | Automatic expiration |
| Failed login attempts | 24 hours | Automatic reset |
| IP ban records | 1 hour | Automatic expiration |
| Refresh tokens | 7 days | Expiration or logout |
| Household invitations | 7 days | Accepted, rejected, or expired |
| Audit logs | 1 year | Automatic expiration |
| AI processing data | 0 — not retained | Discarded after processing |
To delete your entire account, go to Profile → Delete Account. This removes:
When you connect: We store an encrypted access token (AES-256-GCM) that allows us to retrieve your account and transaction data.
When you disconnect: We immediately delete the access token and revoke access with Plaid's API. Historical transaction data is retained unless you specifically request deletion.
To manage data Plaid has collected directly, visit my.plaid.com.
When you connect: We store your SimpleFIN access URL to retrieve account and transaction data.
When you disconnect: We delete the access URL. Historical data is retained unless you request deletion.
When you connect: We create a SnapTrade user linked to your account and store connection credentials.
When you disconnect: We delete the brokerage connection via SnapTrade's API and remove stored credentials. Historical holdings data is retained unless you request deletion.
All AI processing happens on your server. No data leaves your network.
When using the CyriLiNa Private AI™ add-on, transaction data is sent to our AI server for processing. This data is processed in memory, never logged, and immediately discarded after the response is returned. No financial data is stored on our AI infrastructure.
If you connect your own OpenAI, Anthropic, or other API keys, your financial data is sent to those providers. Their data retention policies apply. We do not control how third-party AI providers handle your data.
Before deleting your account, you may export your data. This includes:
To export, go to Profile → Export Data.
We may retain certain data beyond deletion requests if required for:
We automatically purge the following:
For data deletion requests or questions about this policy:
Email: privacy@sharkfinenhance.xyz
Company: CyriLiNa.IT LLC