At BankShift, we understand that you need to know how data about you (i.e., personal data) is used. The BankShift Privacy Notice consists of this page and the specific notices below which describe how we collect, use, and share personal data and explain your related rights and choices. “We” (or “Us”) are ShiftSense, Inc. (including any relevant affiliates) and “You” may be a visitor to one of our websites, including www.bankshift.com (“Sites”) or a user of our online services and applications and any related downloadable software (“Offerings”)
Who We Are
ShiftSense, Inc. is headquartered in Oregon state, with various other offices in the United States. You can learn about us and our Offerings here.
ShiftSense, Inc. may share personal data with our affiliated companies for our or our affiliates’ internal business purposes (e.g., when you use or purchase an affiliate’s services, when you apply to one of our offices, etc.), marketing similar products, or for other legal requirements. A reference to “BankShift,” “we,” or “us” is a reference to ShiftSense, Inc. and the relevant affiliate involved in the processing activity.
Information We Collect
To offer these services, we use information you provide to us, information that we collect automatically when you use or access the Site, or that we collect from you and your financial accounts as you use our Site.
Information you provide to us
To access our services through the Site, you are required to sign up for an account. When you sign up for an account, we may ask you to provide us with personal information about you, like your name, e-mail address, mobile phone number, date of birth, social security number, or an avatar for your account.
During the account setup, you will be asked to provide certain information about you from third-party financial institutions or third-party payments providers with which you have a legally binding customer relationship (each, a “Third-Party Financial Institution”). To enable us to access your financial data with Third-Party Financial Institutions, you will need to provide (as applicable): the name of the Third-Party Financial Institution, the username or email associated with that institution, the password for your financial account, and other similar information. We collect this information to establish a connection with your financial accounts and gain access to information and data we need to provide you with the services you request, including your bank account and routing number with that institution. We do not store your bank account and routing number in our systems.
Information we collect from your use of our Site or App
In addition to the information you provided when creating your account, we may collect information from you during your use of the Site a. For instance, we may collect information from you about the device you use to access the Site, what operating system or internet browsing software you use for that access, and your IP address. We also may collect information about how you use our Site, including what links you may click on or whether you have visited our Site in the past and when.
When you authorize us to access information from your financial accounts with Third-Party Financial Institutions, we may also collect information about those accounts, including the balance of those accounts, what type of institution is holding the account, and what type of account is involved (i.e., checking or savings and credit or depository). We also collect information about the transactions that have taken place with that financial account, including, but not limited to, the amount of the transaction, where the transaction took place, and the time of the transaction.
Cookies and Google Analytics
- Better understanding how you use our Site;
- Detecting and defending against fraud and other security risks; and
- Better presenting advertisements, products, and/or services of interest to you.
To learn more about how Google Analytics collects and processes data, please visit “How Google uses data when you use our partners’ sites or apps”, located at www.google.com/policies/privacy/partners/.
How We Use the Information We Collect
We use the information we collect for a variety of purposes, including:
- Providing the Site and all related services to you
- Improving the Site and all related services, as well as to research and develop new services, determine customer demand for new or improved services, and specifically tailoring or customizing our services for you and other customers
- Communicating with you regarding your account, changes to the Site or services we provide, and promotional material about new services or products we may be offering
- Responding to requests or inquiries from you
- Providing customer support or technical assistance
- Creating or administering your account, including identifying you with your account
- Maintaining the Site, including by ensuring compatibility with software and hardware you or our customers typically use.
- Securing the Site and our systems and networks, and protecting your information and data
In addition to the above, we may use information about your transactions (including their amount, where they take place, and when they occurred) (“Transaction Information”) to provide you with summaries, reports, or trends regarding your spending, including information on the categories or frequency of purchases. We may use your Transaction Information to help show you trends in your spending, to predict future spending, or to highlight opportunities for savings. We may use Transaction Information to highlight unusual spending trends – like spending associated with a business trips/vacation or major purchases – to improve your record keeping and budgeting. And we may use your Transaction Information to show you the way such transactions may have affected your financial goals.
Information We Share with Others
We do not share your personal or financial information with companies, organizations, or individuals outside of BankShift with the following exceptions.
- Name of the financial institution where your account is held
- Your username
- Your email address
- Password for that financial account
Plaid receives this information and establishes a connection to those financial accounts. Once the connection is established, we delete the financial account information from our system.
- Your name
- Your social security number
- Your name
- Your address
- Your Images
- Your social security number
Onfido receives this information and establishes a risk score based on matching your government issued identification and selfies with motion. Once the request is completed, we delete the financial account information from our system
Google Analytics – As indicated above, we also provide information regarding your use of our Site or App, or clicks on links to other sites on our Site, to Google Analytics. Though the information we provide can be used to understand how you use our Site, the information cannot be used to identify you.
We may also share personal or financial information with others if we have a good-faith belief that access, use, preservation, or disclosure of the information is reasonably necessary to:
- Meet any applicable law, regulation, legal process or enforceable governmental request
- Enforce applicable Terms of Service, including the investigation of potential violations
- Detect, prevent, or otherwise address fraud, security or technical issues
- Protect against harm to the rights, property, or safety of BankShift, our users, or the public as required or permitted by law
And, we may provide access to your information to third-party vendors who may be assisting us with the operation, maintenance, or security of our Site.
Essential Service Providers – We also share information with essential third party service providers as necessary to provide the Site and the services to you. For example, we use Amazon Web Services (AWS) as a cloud server provider, and as such we necessarily share information with AWS. Information shared with such essential service providers is strictly limited to the purposes of providing the Site and the services to you.
As Required By Law – In certain circumstances, we may share information as necessary and appropriate under applicable laws (including outside your country of residence) to comply with legal process or requirements, including notification obligations; respond to requests from public and government authorities or regulators (including those outside your country of residence); enforce our contractual rights and comply with our contractual agreements; and to protect the rights, privacy, safety, or property of you, BankShift, and others.
Information You Share with Others
Our Site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check these policies before you submit any personal data to these websites.
We attempt to provide you with accurate information about your financial accounts. To do so, we need accurate information from you about yourself and those accounts. If you find that information we have about you is outdated, missing, or incorrect, we would ask that you notify us at email@example.com of these errors so that they can be addressed. We may ask you to verify your identity before we act on any request to change your information. We may also reject requests that are unreasonably repetitive, require extraordinary or disproportionate technical effort or cost, risk the privacy or security of others, or would be extremely impractical.
Reviewing and Updating your Personally Identifiable Information
You can view and update your profile and account information by signing into your BankShift Account. Once signed in, you can select the “Profile” option under the menu to edit any of your personally identifiable information.
How to Request the Deletion of Personal Information We Collect
You may request your account be deleted by our support department by emailing firstname.lastname@example.org from the email address associated with your account, indicating “CANCEL” in the subject line of the message. After confirming you are the account owner we will remove personal information from our records and will only continue to retain such information as required by law.
Do Not Track Disclosures
Do Not Track. BankShift does not track its users over time and across third-party websites and therefore we do not respond to Do Not Track signals.
We are committed to protecting BankShift and our users from unauthorized access to, or unauthorized alteration, disclosure, or destruction of, information we may possess. To provide for the security of information in our possession, we may:
- Encrypt information in our possession in transit and rest
- Offer or require multi-step authentication when you access your account
- Review our information collection, storage, and processing practices, including physical security measures, to guard against unauthorized access
- Restrict access to personal or financial information to BankShift employees, contractors, partners, or agents who need to know that information in order to process it for us and are subject to confidentiality obligations
Updates and Changes
Questions About Our Privacy Practices
Last Updated September 2020.