Security
Your privacy is our architecture.
Finease is designed from the ground up to keep your financial data private. Security is not a feature — it is the foundation.
0
Bank passwords stored
0
Raw emails persisted
AES-256
Encryption standard
How we protect you
Six layers of protection
Zero bank credentials
We never ask for your bank username, password, or PIN — not during signup, not ever. Finease works through email forwarding only. Your bank login stays between you and your bank.
Email processed & discarded
When a forwarded alert arrives, Finease parses the transaction data in isolated, encrypted memory. The raw email content is never persisted to disk — only the extracted transaction record is stored.
Encryption everywhere
All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Your transactions are stored in an encrypted database that only you can access through your authenticated session.
You own your data
Your transaction history belongs to you. Export it as CSV at any time. We don't use your data to train models, build ad profiles, or sell to third parties. Your financial life stays private.
Delete anytime
Request account deletion from Settings and all your data — transactions, preferences, parsing history — is permanently deleted within 24 hours. No retention, no backup exceptions.
Secure authentication
Email-based passwordless login means there is no password for attackers to steal or for you to forget. Session tokens are rotated regularly and invalidated on logout.
Data flow
What happens to your email
Email arrives at Finease
Your bank sends an alert. Your email client forwards a copy to your private Finease address. The original stays in your inbox.
Parsed in encrypted memory
Finease reads the forwarded email in a sandboxed, encrypted process. Amount, merchant, category, and balance are extracted.
Raw email discarded
The email content is destroyed. Only the structured transaction record is kept — no email text, no sender, no raw content.
Transaction stored securely
The extracted record is encrypted and written to your account's private transaction store. It's now visible only to you.
Our commitments