Financial Account Data Privacy Notice
Effective: October 18, 2026. Last updated: October 18, 2026.
1. Scope
This notice explains how TANNU LLC (doing business as Sprocket Appliance Repair, “we”) handles financial account data in Tannu Finance, our internal bookkeeping system. Tannu Finance connects only the business and personal accounts of the owner of TANNU LLC. It is not offered to customers or the public, and we do not collect bank or card data from customers or website visitors. Our general website privacy policy is at sprocketrepair.com/privacy.
2. Data we receive
We use Plaid Inc. (“Plaid”) to connect the owner’s accounts. With the owner’s authorization, we receive:
- account name, type and the last four digits of the account number;
- balances and credit limits;
- transactions: date, amount, merchant and description;
- credit card details: statement balance, minimum payment, payment due date, interest rates (APR) and last payment.
We do not receive or store bank login credentials. They are entered directly with Plaid.
3. How we use it
- bookkeeping and categorizing business expenses;
- preparing tax records (federal Schedule C, New York sales tax);
- reminding the owner of credit card due dates and minimum payments;
- monthly and weekly financial summaries for the owner.
We do not sell this data, use it for advertising, or share it with anyone for their own purposes.
4. Plaid
Plaid’s handling of data is described in the Plaid End User Privacy Policy. Connections can also be reviewed and removed at my.plaid.com.
5. Service providers
- Plaid Inc. — connects accounts and delivers account data.
- DigitalOcean, LLC — hosts the server; data is stored on an encrypted storage volume (privacy policy).
- Telegram — delivers notifications to the owner, such as a card payment due date and amount (privacy policy).
- Anthropic, PBC — may receive aggregated monthly totals (no account numbers and no individual transactions) to draft a short written commentary for the owner (privacy policy).
6. Security
- data in transit is encrypted with TLS;
- data at rest is stored on an encrypted volume;
- Plaid access tokens are kept in files readable only by the application account and are never logged;
- server access is limited to the owner, only through a private network and with SSH keys;
- software and dependencies are checked for vulnerabilities weekly.
7. Retention and deletion
- transactions and tax records: 7 years after the end of the tax year they relate to, to meet IRS and New York record-keeping rules;
- credit card details: only the latest snapshot, while the account is connected;
- Plaid access tokens: only while the account is connected. When an account is disconnected, its access is revoked at Plaid and the token and card snapshot are deleted from our server.
8. Contact
Questions about this notice: hello@sprocketrepair.com, subject line “Privacy Request”.
9. Changes
We update this notice when the way we handle financial data changes and revise the date at the top of the page.