Privacy policy
Last updated November 5, 2026
ATMSight helps a business that supplies cash to ATMs keep track of its machines, cash, bank and books. This page explains what the app collects, why, who it's shared with, and how to have it removed.
What we collect
- Your account: your name, email address, password (stored only as a hash) and two-step login setup.
- Your business's records: its ATMs, visits, cash counts, bookkeeping entries, and the statements and reports you upload.
- Bank data, when an owner or admin connects the business's bank through Plaid: account names, the last four digits of account numbers, balances, and transactions (date, description, amount, and whether it's pending). We never see or store bank sign-in details.
- CDS data, when an owner or admin connects the business's CDS WebTools login: daily ATM activity, cash loads and balances. Card numbers in CDS reports are never stored.
How we use it
Only to run the app for your business: to show its cash position, plan ATM loads, keep its books and send the emails the app needs: verifying your email address and inviting members. We don't sell your data, use it for advertising, or use any analytics or tracking.
Who it's shared with
- Railway, which hosts the app and its database in the United States.
- Plaid, which connects the business's bank. Plaid's handling of your data is covered by the Plaid End User Privacy Policy.
- Columbus Data Services (CDS), which the app signs in to for the business's ATM reports.
- Resend, which delivers the app's emails.
Only members of a business can see its records, and what they can see depends on their role.
How it's protected
Every connection uses HTTPS. Everyone signs in with two-step login. Data is encrypted at rest, and bank connection tokens and CDS passwords are encrypted again by the app before they're stored. Each business's records are kept apart from every other business's.
Your choices
- An owner or admin can disconnect the bank or CDS at any time. Disconnecting the bank ends Plaid's access and deletes the stored connection; disconnecting CDS deletes the stored password.
- Records are kept while the business uses the app, as its financial records. A business can ask for its data to be deleted; we do it within 30 days, except records the law requires us to keep.