Hey dawhizkid - co-founder of Plaid here. I can't give the rationale on why RH wrote the privacy policy the way they did, but I can guarantee you that they are not pulling transactional data. They're only using Plaid for the ACH authentication. If you'd like more insight feel free to shoot me a note at william at plaid dot com.