We handle your financial data with the same care you do. Here's exactly how we protect it — no vague promises, just facts.
We never build ad profiles from your money. Any ads on free plans or our free content are contextual — never personalized from your transactions, balances, or accounts. Pro is always ad-free.
We never sell your data, and we never share your financial information with data brokers or third parties for their benefit.
We only ask for data required to deliver the product. Nothing extra, nothing speculative, nothing 'just in case.'
When you connect a bank account, we use Plaid — the same provider trusted by Venmo, Robinhood, and Coinbase.
We can see your transactions. We can never move your money, make transfers, or change anything in your account.
Your bank credentials are stored by Plaid, not by us. We never see your banking password.
We believe you should know exactly what enters our systems.
In Transit & At Rest
All data encrypted in transit (TLS 1.2+) and at rest (AES-256).
Google Cloud Platform
Hosted on Firebase with global SOC 1/2/3 compliance standards.
Data Isolation
Firestore security rules enforce per-user data isolation at the protocol level.
Who can see your data? We maintain a zero-knowledge philosophy wherever possible.
No routine access to individual user financial data by any employee.
Access is limited to anonymized, aggregated data for system performance metrics.
Any emergency access requires documented justification and a permanent audit trail.
Request account deletion and we permanently remove ALL your data. Plaid connections are instantly revoked. Your data is purged from live systems immediately, and ages out of our encrypted backups within 30 days as they rotate.
Instant
Live data purge
≤30
Days to clear backups
100%
Plaid revocation
Found a vulnerability? We welcome responsible disclosure from security researchers.
support@urbanpx.com