AI Connector Privacy Notice
Effective Oct 28, 2026
The Monarch MCP connector lets you link your Monarch account to AI apps you choose, such as Claude and ChatGPT. It's off unless you turn it on. This notice explains what happens to your data when you use it, and it supplements our Privacy Policy.
How It Works
You connect an AI app by signing in to Monarch and choosing read-only or read-and-write access. When you ask the app about your finances, it requests specific data from Monarch, such as your transactions for a date range, and we send it back. With read-and-write access, the app can also make changes you ask for, like recategorizing transactions. We don't see your conversation with the AI app, only the requests it sends us.
The connector is separate from Monarch's own AI features, like the AI Assistant. When you use the connector, the AI app you choose processes your data under its own terms, not ours. To learn how Monarch's own AI features handle your data, see AI in Monarch.
What We Collect and How Long We Keep It
When you use the connector, we keep these records:
Record | What It Is | How Long We Keep It |
Connection records | E.g., which AI app you connected, the web address that identifies it, the access you granted, and when you connected and last used it. You can see these in Settings > Integrations. | Up to 2 years |
Consent records | What we showed you when you agreed to data-provider reporting, when you agreed, and when you revoked consent. | Up to 2 years after you revoke consent |
Request records | Records we create when an AI app asks Monarch for data or makes a change, with details such as which tool it used, when, from which connection, which of your accounts the data came from, basic details like a date range, and whether it worked. | Up to 2 years |
Request intent | A note the AI app writes about what a request is for, such as "comparing recurring charges." | Up to 2 years |
Change records | When an AI app changes your data, what kind of change it was and which items changed. | Forever |
Usage statistics | E.g., counts of requests and whether they worked, used to improve the connector. | Up to 2 years |
Server logs | Routine technical logs we use for security and fixing problems, including the IP address used when you connect an AI app. | Up to 30 days |
Why We Use It
We use these records to run the connector and enforce your access and usage limits, keep your account secure, and fix problems. We also use them to keep the records our data providers require, answer questions from you or from financial institutions, and improve the connector. We don't use them for advertising.
Who Receives It
AI apps you connect receive the data they request, from your household only. That can include your name and the names of your household members, but never full account or routing numbers. Once an AI app has your data, the AI provider's terms and privacy policy apply, not ours. Many AI providers let you opt out of having your conversations used to train their models, so check your settings before you connect: see OpenAI's data controls and Anthropic's Privacy Center. We only allow connections from approved AI apps, listed in Settings > Integrations.
Data providers. Some of the data providers that connect your financial accounts to Monarch require us to report AI app access, to meet their compliance obligations to your financial institutions. These reports list the AI app's redirect URL (the web address that identifies the app), when it accessed your data, and which account connections were involved. Reports never include your transactions, balances, other account data, or your conversations, and may be used only for compliance purposes.
If a data provider asks, (e.g., your financial institution is looking into a transaction you disputed, we may give it our record of your consent and our records of when its data was shared with an AI app. We share anything else that identifies you with a data provider only when the law requires it. You can see which data provider connects each of your accounts in Settings > Institutions. We'll update this notice if that changes.
Service providers and legal requirements. We use service providers to host and log connector activity, and we may disclose records when the law requires it, as described in our Privacy Policy.
Your Choices
- Disconnect one app in Settings > Integrations. It loses access right away.
- Revoke all on the same page disconnects every app and stops reports to data providers. Agreeing to those reports is required to use the connector.
- Manage what the AI app keeps in that app's own settings.
- Delete your Monarch data as described in our Privacy Policy.
Changes to This Notice
We may update this notice from time to time. When we do, we'll post the new version here and update the effective date above. If we make material changes, we'll let you know as described in our Privacy Policy.
Contact Information
If you have any questions about this notice or how we handle your data when you use the connector, contact us at support@monarch.com.