Prosper
Sign UpLogin

Legal

Privacy Policy

Privacy Policy

Prosper Finance — Operated by Enbrite LLC Effective Date: March 18, 2026

This Privacy Policy describes how Enbrite LLC ("we," "us," or "our") collects, uses, shares, and protects information when you use Prosper Finance (the "Service"), including the Prosper web application and any related features, tools, or communications. By using the Service, you agree to the practices described in this Policy.

This Policy applies to US residents and the US-only launch of the Service. If you are a California resident, please also see the California Notice at Collection for additional rights and disclosures required under the California Privacy Rights Act (CPRA/CCPA).

If you have questions about this Policy, please contact us at privacy@prosperfinance.app.

1. Information We Collect

We collect information in several ways: information you provide directly, information collected automatically when you use the Service, and information we receive from third-party services you connect.

1.1 Account and Registration Information

When you create an account, we collect information such as your name, email address, business name, and password (stored in hashed form). If you complete your profile or set up a workspace, we may also collect your business type, industry, and any preferences you configure.

1.2 Financial Data (Connected via Plaid)

If you choose to connect a bank or financial account, we use Plaid Technologies, Inc. ("Plaid") to facilitate that connection. Through Plaid, we may receive:

  • Account details: institution name, account name, account type, and last four digits of account numbers
  • Balances: current and available balances for connected accounts
  • Transactions: posted and pending transaction data, including merchant descriptions, amounts, dates, and transaction categories assigned by the financial institution

We do not receive or store your bank login credentials. Plaid handles authentication directly. You control which accounts are connected and can disconnect them at any time in your Prosper settings or via the Plaid Portal. See Section 6 for more on Plaid.

1.3 Bookkeeping and Workspace Data

As you use the Service, we store data you create or import, including:

  • Transactions (imported or manually entered), categorizations, category rules, and memos you apply
  • Chart of accounts, account mappings, and workspace configuration
  • Invoices, line items, client names, and payment references you enter
  • Receipts and supporting documents you upload
  • Journal entries and financial reports generated through the Service

1.4 AI Interaction Data

When you use AI-powered features (such as categorization suggestions, the AI assistant, or plain-language summaries), we may process:

  • Your prompts, messages, and instructions
  • Relevant transaction or bookkeeping context needed to fulfill your request
  • Workspace rules and preferences you have set

See Section 7 (AI Features) for details on how this data is handled, including what is sent to third-party AI vendors.

1.5 Usage and Device Data

We automatically collect certain technical and usage information when you access the Service, including:

  • Browser type and version, operating system, and device type
  • IP address and approximate location (country/state level)
  • Pages visited, features used, actions taken, and session duration
  • Error logs, performance data, and crash reports

We use this data for service reliability, security monitoring, debugging, and product improvement. We use first-party analytics and do not use this data for cross-site behavioral advertising.

1.6 Communications

If you contact us for support, send us feedback, or communicate with us by email, we retain those communications and any information you provide in them.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and operate the Service, including processing transactions, generating reports, and maintaining your bookkeeping workspace
  • To enable bank connectivity through Plaid and keep connected accounts synchronized
  • To provide AI-powered features, including categorization suggestions, explanations, summaries, and conversational assistance (see Section 7)
  • To send transactional communications, such as account confirmations, billing receipts, and service notifications
  • To provide customer support and respond to your requests
  • To monitor and improve the reliability, security, and performance of the Service
  • To detect and prevent fraud, abuse, unauthorized access, and other security incidents
  • To comply with our legal obligations and enforce our Terms of Service
  • To improve our internal categorization models using aggregated or de-identified data derived from confirmed categorizations (see Section 7.3)

We do not use your information for cross-context behavioral advertising or sell your personal information to third parties for their own marketing purposes.

3. Sharing and Disclosure

We do not sell your personal information. We share information only as described below.

3.1 Service Providers and Subprocessors

We share information with third-party service providers that help us operate the Service. These providers act as our service providers or data processors and are contractually required to use your information only as directed by us and not for their own purposes. Current subprocessors include:

  • Plaid Technologies, Inc. — bank account connectivity and transaction data retrieval
  • Stripe, Inc. — payment processing for your subscription and invoicing features
  • Supabase — cloud database hosting and authentication infrastructure
  • Sentry — error monitoring and application performance
  • OpenAI OpCo, LLC — AI feature processing (categorization suggestions, assistant, summaries); see Section 7

A current list of subprocessors is maintained at /subprocessors and updated as our vendor relationships change.

3.2 Legal Compliance and Protection

We may disclose information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, or legal process; (b) protect the rights, property, or safety of our company, our users, or others; or (c) respond to a verified request from law enforcement.

3.3 Business Transfers

If we undergo a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

3.4 With Your Consent

We may share information in other ways if you direct us to do so or give us your explicit consent.

4. Data Retention

We retain your account information and bookkeeping data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or de-identify your personal information within a reasonable time, except where we are required to retain it for legal or compliance obligations (such as tax records, fraud prevention, or dispute resolution).

Specific retention periods by data category:

  • Transaction and bookkeeping data: retained for the life of your account, plus up to 7 years after account closure to satisfy potential audit or regulatory obligations
  • Account and profile data: deleted within 90 days of account closure
  • AI interaction logs: subject to the retention practices of the applicable AI Vendor (see Section 7); internal logs may be retained for up to 90 days for debugging and security
  • Support communications: retained for up to 3 years
  • Usage and device data (logs): retained for up to 12 months

5. Security

We implement administrative, technical, and physical security measures designed to protect your information against unauthorized access, disclosure, alteration, or destruction. These include encryption in transit (TLS), hashed credential storage, access controls, audit logging, and security monitoring.

No security system is impenetrable. We cannot guarantee that your information will never be accessed in an unauthorized manner. If you believe your account has been compromised, please contact us immediately at support@prosperfinance.app.

6. Financial Data and Plaid

When you connect a bank account, Plaid acts as a connector between your financial institution and Prosper. You authorize Plaid to retrieve financial data on your behalf and share it with us for bookkeeping purposes. Plaid's collection, use, and disclosure of your data is governed by Plaid's End User Privacy Policy (available at plaid.com/legal).

What Prosper does with your financial data:

  • We import and display transaction and balance data to power your bookkeeping workspace
  • We do not use financial data for advertising or share it with advertisers
  • We do not receive your bank login credentials

Your controls:

  • You can disconnect a connected account at any time in Prosper Settings → Connected Accounts
  • You can also manage and delete data stored in Plaid through the Plaid Portal
  • Disconnecting an account stops future data syncing; existing bookkeeping data in Prosper is retained unless you separately delete it

If we add new Plaid products or use cases (such as payment initiation), we will provide updated consent screens before enabling them.

7. AI Features

7.1 What AI Features Do

Prosper includes AI-powered features ("AI Features") designed to reduce manual bookkeeping work, including transaction categorization suggestions, plain-English explanations, searchable summaries, and a conversational assistant. AI outputs can be helpful, but they can also be wrong. You are responsible for reviewing and confirming AI outputs before applying them to your books.

7.2 Data Sent to AI Vendors

To generate AI outputs, Prosper may send a limited subset of your data to third-party AI service providers ("AI Vendors"). Depending on the feature used, this may include:

  • Your request, prompt, or message and relevant conversation context
  • Transaction-level details needed to complete the task, such as merchant/description text, amounts, dates, category history, and account display names
  • Preferences and rules you have set, such as your chart of accounts and categorization rules
  • Support content you provide if you ask for help troubleshooting an AI Feature

AI Features do not require your bank login credentials. AI Vendors process information on our behalf as service providers/subprocessors and are not permitted to use your data for their own model training, pursuant to their API agreements with us. Our current primary AI Vendor is OpenAI OpCo, LLC. Under OpenAI's standard API terms, inputs and outputs may be stored by OpenAI for up to 30 days for safety and abuse monitoring, after which they are deleted. OpenAI does not use API data to train its models under these terms.

7.3 Internal Model Improvement

Prosper may improve its internal categorization models using aggregated or de-identified information derived from confirmed categorizations (for example, cleaned merchant description text paired with category labels). We do not attempt to re-identify de-identified data. Prosper may not offer an individual opt-out for this internal model improvement; optional AI Features may have separate enable/disable controls.

7.4 AI Controls

AI Features may be enabled by default to provide AI-assisted functionality. You can disable AI Features in your account settings. If you disable AI Features, AI-powered functionality may be limited or unavailable, while core non-AI product features remain available.

7.5 Accuracy and Limitations

AI outputs are generated from patterns and may be inaccurate, incomplete, or inappropriate for your situation. AI Features do not provide accounting, tax, legal, or financial advice. Prosper is not a substitute for a qualified professional. You should not rely on AI outputs as the sole basis for decisions requiring professional judgment, including tax filing positions, audit or compliance determinations, financial statement conclusions, or legal filings.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Service, maintain your session, and collect usage data for product improvement and security. We do not use third-party advertising cookies or cross-site tracking for behavioral advertising.

Types of cookies we use:

  • Strictly necessary: required for authentication, session management, and core Service functionality
  • Functional: remember your preferences and settings
  • Analytics: first-party analytics to understand how features are used and to improve the Service

You can configure your browser to block or delete cookies, but doing so may impair Service functionality, including your ability to stay logged in.

9. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13 without verified parental consent, we will delete that information promptly. If you believe we may have collected information from a child under 13, please contact us at privacy@prosperfinance.app.

10. Third-Party Links and Services

The Service may contain links to third-party websites or services (such as your financial institutions or Plaid). We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before sharing any information with them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top and, for material changes, provide additional notice (such as an in-app notification or email). Your continued use of the Service after changes become effective constitutes your acceptance of the updated Policy.

12. California Privacy Rights (CPRA / CCPA)

This section applies to California residents and supplements the rest of this Policy. It is provided pursuant to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CPRA").

12.1 Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information (as defined by the CPRA):

  • Identifiers: name, email address, IP address
  • Financial information: bank account metadata, transaction data, balances (received via Plaid)
  • Commercial information: subscription and billing records, invoices
  • Internet or other electronic network activity information: usage data, session logs, feature interactions
  • Inferences: category suggestions and bookkeeping patterns derived from your data

We collect this information for the business and commercial purposes described in Section 2.

12.2 Sensitive Personal Information

We collect financial account data (via Plaid) that may qualify as sensitive personal information under CPRA. We use this data only to provide the Service and do not use it for purposes beyond what is necessary to perform the Service and as disclosed in this Policy.

12.3 Sale or Sharing of Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.

12.4 Your CPRA Rights

As a California resident, you have the right to:

  • Know: request disclosure of the categories and specific pieces of personal information we have collected about you, and the purposes for which it is used
  • Delete: request deletion of personal information we have collected about you (subject to exceptions)
  • Correct: request correction of inaccurate personal information
  • Opt out of sale/sharing: we do not sell or share for cross-context behavioral advertising, so no opt-out is currently applicable
  • Limit use of sensitive personal information: request that we limit use of sensitive PI to what is necessary to perform the Service
  • Non-discrimination: we will not discriminate against you for exercising your CPRA rights

12.5 How to Submit a Request

To exercise your rights, please email privacy@prosperfinance.app with the subject line "California Privacy Request." We will verify your identity before processing your request. We will respond within 45 days (or notify you if we need additional time, up to 90 days total).

Authorized agents: if you submit a request through an authorized agent, we may require written proof of authorization and may verify your identity directly.

13. Other US State Privacy Rights

Residents of certain other US states (including Virginia, Colorado, Connecticut, Texas, and others) may have rights to access, correct, delete, or opt out of certain processing of personal data under applicable state privacy laws. To submit a request, please contact us at privacy@prosperfinance.app. We will review and respond consistent with applicable law.

14. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact us:

Enbrite LLC — Privacy Email: privacy@prosperfinance.app Support: support@prosperfinance.app Website: https://prosperfinance.app

© 2026 Enbrite LLC. Prosper Finance is a product of Enbrite LLC.