Security
What we never see
We never see your bank login. You link a bank on Plaid's own page, and your username, password, and security codes go only to Plaid or to your bank. They never reach us, and they never reach your agent.
What we keep
We keep your budget, and the details of each transaction that we need to recognise your spending: the date, the amount, the currency, the description your bank sends, the merchant name, and whether the transaction is still pending. When you first link a bank, we fetch about ninety days of history, and after that only new transactions. We do not keep your full bank history or the raw data your bank sends. We never have your card number; when you pay for Mintro, Stripe holds it.
How it is kept
Everything is encrypted while it travels between your device, our servers, and the services we use. The tokens that let Mintro read from your bank are also encrypted when they are stored, under keys we rotate, kept in a secrets vault and never in our code. Each customer's data is walled off from every other customer's inside the database itself, not only by our application. Backups are kept for a short time and then deleted automatically.
Who can act on it
Only you, and the agents you choose. You sign in to the app, and you can turn on two-step verification for your account. An agent acts with a key that you create, and the key can only do what you yourself are allowed to do. A key expires ninety days after its first use, and if you revoke it, it stops working within a minute. Nobody else can act on your budget, and an agent can never create a key.
What you can see
You can see everything that changed, as it happens, and who changed it. Every refused request, every key created or revoked, every bank unlinked, and every export is recorded and kept for ninety days under Activity → Security.
How to tell us
If you find a security problem, the security.txt file on this site explains how to report it. We read every report and we answer.
Mintro does not move money, and it is not a bank.