Compliance

Last revised: July 29, 2018

• Service scope — Moneytree is a read-only financial data aggregation platform. It consolidates account information from multiple institutions into one dashboard; no transactions are permitted.
• User responsibilities — Users must use the service lawfully, keep login credentials confidential, and provide accurate information. Users bear full responsibility for all usage and consequences.
• Data access methods — Moneytree accesses account data either through user-provided credentials or via API connections with financial institutions, with the user's explicit consent.
• Limited liability — Moneytree disclaims responsibility for service interruptions, inaccurate data, and system failures. Liability is capped at amounts paid or ¥500, whichever is lower.
• Account termination — Accounts may be suspended or deleted for rule violations, 365+ days of inactivity, or system abuse.
• Paid service — Mid-contract cancellations incur the full period charge with no refunds, unless required by law. Price changes apply only to new subscribers.
• Jurisdiction — All disputes are governed by Japanese law under the exclusive jurisdiction of the Tokyo District or Summary Court.

Last revised: July 1, 2023

• Data collected — Email addresses, financial authentication credentials, account data (balances, transactions, statements), and usage analytics. Only the minimum necessary data is collected.
• How data is used — To provide the service, aggregate account data across financial institutions, analyse spending patterns, and surface personalised financial product recommendations.
• Third-party sharing — Account data is shared with linked institutions only with explicit user consent. Anonymised statistical data may be provided to third parties for research without consent.
• User rights — Users may request access, correction, deletion, or suspension of their data. Some requests require identity verification and may incur a ¥1,000 disclosure fee.
• Security measures — Multi-factor authentication, encrypted storage in approved cloud services, device management policies, and comprehensive access logging.
• Data deletion — Deleting your Moneytree ID or disconnecting linked institutions automatically removes the associated data.
• Compliance — Moneytree holds TRUSTe certification and complies with Japan's Act on the Protection of Personal Information (APPI), with regular policy reviews.