These Terms govern your use of KOSHA at kosha.money, operated by Srinivasarao Vassadi (“we”, “us”). By requesting access, signing in or using KOSHA, you agree to them. If you do not, do not use it.
Our Privacy Policy is part of this agreement.
1. What KOSHA is
A read-only aggregator. It connects to financial accounts you already hold, reads balances and transactions, and shows you the total in one place, along with a history of how that total has moved.
2. What KOSHA is not
- Not a bank, not a credit union, and not a deposit holder. It holds no money and is not insured by the FDIC, the NCUA or anyone else. Your money stays where it already is.
- Not a broker-dealer and not an investment adviser. Nothing in KOSHA is investment, financial, tax, accounting or legal advice, or a recommendation to buy, sell or hold anything. It is information about your own accounts, and what you do with it is yours.
- Not a money transmitter. KOSHA cannot initiate a transfer, a payment or a standing instruction. The access it holds is read-only, and there is no code path in the product that moves money.
- Not a system of record. Your bank, broker or lender is. Where KOSHA and your institution disagree, your institution is right.
3. Access is granted, not claimed
KOSHA has no self-serve sign-up. Accounts are created by hand, one at a time, after a request. We may decline any request, and we may withdraw access at any time, for any reason or none. Nothing here is a promise that you will be given an account or allowed to keep one.
You must be at least 18, using KOSHA for your own personal and non-commercial purposes, and legally able to enter this agreement. One account per person. Do not share it.
4. Your account and your device
You sign in with a link sent to your email address and then with a passkey held on your device. Keeping that device and that mailbox secure is your responsibility, and anyone with either can reach your data.
If you lose a device or suspect someone else has access, sign out everywhere from the Connections screen — it revokes every live session immediately, including the one you are using — and tell us at srinivas.vassadi@gmail.com.
5. Linking your accounts
When you link an institution, you authorise us and our provider to access that account on your behalf, on a read-only basis, and to retrieve and store the data described in the Privacy Policy, until you disconnect it.
You may only link accounts you own or are authorised to access. Linking someone else’s account without their permission is a breach of these Terms and may break the law.
Connections run through Plaid Inc., and your use of that connection is also governed by Plaid’s own terms and privacy policy, which you accept directly with Plaid. We are not responsible for Plaid’s services, and we cannot fix an institution that stops responding to them.
6. Accuracy, and its limits
Every figure in KOSHA comes from a third party. It can be delayed, incomplete, stale, mis-categorised or simply wrong, and an institution can stop reporting at any time without notice.
KOSHA is built to be honest about this rather than to paper over it: a balance it cannot convert is named rather than dropped from a total, a source that has stopped reporting is marked, and where there is nothing true to show it shows nothing. That is a design commitment, not a warranty.
Do not rely on KOSHA for any decision that matters without checking the figure against your institution. It is not a substitute for your statements, and it is not a tax or accounting record.
7. What you enter yourself
Off-network holdings and loan terms are yours: we do not verify them, cannot verify them, and do not appraise anything. They are included in your totals because you asserted them, and they are exactly as accurate as you made them.
8. Acceptable use
You agree not to:
- link an account you do not own or have permission to access;
- probe, scan, overload or attempt to bypass any authentication, rate limit or authorisation control;
- scrape KOSHA, automate access to it outside the interface provided, or resell any part of it;
- reverse engineer, decompile or attempt to extract source code, except where law forbids that restriction;
- use KOSHA to break any law, or to hurt anyone.
Good-faith security research is welcome. Report what you find to srinivas.vassadi@gmail.com rather than to anyone else, and see SECURITY.md in the repository.
9. Availability
KOSHA is offered as-is and as-available, with no uptime commitment and no service level agreement. We may change it, suspend it, or stop offering it entirely. If we shut it down, we will give you reasonable notice and a chance to export your data first.
10. Who owns what
Your data stays yours. You grant us only the licence needed to operate the service for you — to store, process and display your data back to you, and to retrieve it from the institutions you link. That is all, and it ends when you delete your account.
The software, design, name and marks are ours. Nothing here transfers any of it to you.
11. Ending it
You can leave whenever you like. Deleting your account from the Connections screen is immediate and irreversible: there is no grace period and no recovery, deliberately, because a grace period would leave your data in a database you believe you have left. Export first if you want a copy.
We may suspend or end your access at any time, and will tell you unless the law or a live security incident prevents it. Sections 2, 6, 7, 10, 12, 13, 14 and 15 survive.
12. Disclaimer of warranties
Some states do not allow the exclusion of certain warranties, so parts of this may not apply to you.
13. Limitation of liability
Nothing here limits liability that cannot lawfully be limited, including for fraud, or for death or personal injury caused by negligence. Some states do not allow these limits, so parts of this may not apply to you.
14. Indemnity
You agree to indemnify and hold us harmless against claims, losses and reasonable legal costs arising from your use of KOSHA in breach of these Terms or of the law — including any claim that you linked an account you had no right to link.
15. Governing law and disputes
These Terms are governed by the laws of the State of Georgia, without regard to its conflict-of-laws rules. The state and federal courts located in Georgia have exclusive jurisdiction, and both of us consent to venue there.
Before filing anything, write to srinivas.vassadi@gmail.com and give us 30 days to resolve it. Most things are a misunderstanding and end there.
16. Changes to these Terms
We may update these Terms. The date at the top moves when we do, and for a material change you will be told by email before it takes effect. Continuing to use KOSHA after that is acceptance; if you would rather not, export your data and delete your account.
17. The rest
These Terms and the Privacy Policy are the entire agreement between us about KOSHA. If a provision is unenforceable, the rest stands. Not enforcing something once does not waive it. You may not assign this agreement; we may, to a successor.
18. Contact
Srinivasarao Vassadi
GA, USA
srinivas.vassadi@gmail.com