You're trusting us with your financial data. We take that seriously. Here's exactly how we protect it.
All data is encrypted in transit using TLS 1.2+ and encrypted at rest using AES-256. The same standard used by financial institutions and government agencies.
We never see or store your banking credentials. Plaid — trusted by thousands of apps and millions of users — handles all authentication directly with your bank.
WorthIQ has read-only access to your accounts. We can see balances and transactions — we cannot move money, make payments, or initiate any transactions whatsoever.
Your bank username and password never touch WorthIQ's servers. Authentication happens entirely within Plaid's secure infrastructure.
WorthIQ runs on Railway's managed cloud infrastructure. Production database access requires multi-factor authentication and is restricted to authorized personnel only.
You can disconnect any linked financial account at any time from the app. Disconnecting immediately revokes WorthIQ's access to that account's data.
Powered by Plaid
WorthIQ uses Plaid, the industry standard for financial data connectivity. Plaid is trusted by thousands of apps — including Venmo, Robinhood, and Coinbase — and connects to over 12,000 financial institutions.
When you link an account, you authenticate directly with your bank through Plaid's secure interface. WorthIQ only receives a read-only access token — never your credentials.
Learn about Plaid's security →No. WorthIQ has strictly read-only access to your accounts. We can view balances and transaction history, but we cannot move money, make purchases, or initiate any transactions of any kind.
Never. Your banking username and password are only ever entered into Plaid's secure interface. They never pass through WorthIQ's servers or get stored in our database.
When you delete your account, all your personal data — including linked account data and transaction history — is permanently deleted from our systems within 30 days.
Access to production data is restricted to a small number of authorized engineers and requires multi-factor authentication. We do not sell, share, or monetize your financial data.
Yes. Because access is read-only via Plaid, there is no mechanism for any party to initiate transactions. Your money is always safe. Millions of people use Plaid daily with their primary financial institutions.
Sage is powered by Anthropic's Claude API. When you request insights, a summary of your financial context is sent to Anthropic. We do not send raw credentials or account numbers. Anthropic's API does not use your data to train their models.
We take security reports seriously. If you've discovered a vulnerability, please disclose it responsibly by emailing us directly.
worthiq2026@gmail.com