Connecting a bank is a big deal. We built PlavaFin to earn it.
PlavaFin only works if you trust it with your financial data. Here’s exactly how we protect it — in plain language, no fine print.
Your bank login never touches us
Accounts connect through Plaid, the same service many banks and top finance apps use. You sign in with your bank directly — PlavaFin never sees or stores your banking username or password.
Read-only by design
PlavaFin reads your transactions and balances to organize them. It cannot move, send, transfer, or spend your money — we never request payment permissions.
We ask for the minimum
We request only your transaction history and balances — not the ability to initiate payments or pull a broader identity profile. Less data collected is less data at risk.
Encrypted in transit and at rest
Your data is encrypted on the way to us (TLS) and while stored — the entire database, not just your bank tokens. Backups are encrypted too.
Locked-down infrastructure
Our systems sit behind Cloudflare’s network with web-application-firewall and DDoS protection. Administrative access is tightly restricted, protected by multi-factor authentication and a zero-trust access model, with no open remote-login ports.
We never sell your data. No ads.
PlavaFin is funded by subscriptions, not advertising. We do not sell or rent your personal or financial information to anyone — that’s the whole point of paying for the product.
Watched continuously
Automated scanning flags known vulnerabilities in the open-source software we build on, so security fixes are reviewed and shipped quickly.
Yours to control
Disconnect any account instantly, and delete your data whenever you choose. You stay in charge of what’s connected and what’s kept.
You log in with your bank — not with us
The moment people worry about most is the one we designed to be the safest.
You choose your bank
When you connect an account, PlavaFin hands you off to Plaid’s secure connection screen — you never type your bank login into PlavaFin.
You sign in with your bank
You authenticate directly with your bank, using its own login and security checks. Plaid establishes a secure, read-only link.
Only transactions flow back
PlavaFin receives your transactions and balances to organize — nothing that could move your money. You can revoke the connection anytime.
Straight talk about where we are
PlavaFin is built and operated by Nebula Edge, LLC, an independent company. We follow the security principles behind standards like SOC 2 — least-privilege access, encryption everywhere, minimal data collection, and documented policies — and we’ll pursue formal certification as we grow. We’d rather tell you plainly what we do than hide behind a badge.
We also believe security is never “done.” We keep our systems patched, review access regularly, and collect only what the product needs to work.
Found a security issue?
We take reports seriously and respond quickly. Email hello@plavafin.com with the details and we’ll get back to you.
The services that help run PlavaFin
We keep the list of companies that process your data short and transparent. These are the ones we rely on today.
| Provider | What they do | Data involved |
|---|---|---|
| Plaid | Secure bank-account connections | Your linked transactions and balances — you sign in directly with your bank |
| Cloudflare | Hosting, content delivery, network security (WAF/DDoS), and email routing | Site traffic and data encrypted in transit |
| Resend | Delivers transactional email (e.g. waitlist and account notifications) | Your email address |
Your data is stored encrypted on enterprise cloud infrastructure in the United States. As we add services — for example, a payment processor when billing launches — we’ll update this list.
Everything, in writing
Privacy Policy
What we collect, why, how long we keep it, and your rights over it.
Read it →Terms of Service
The agreement that governs your use of PlavaFin.
Read it →Security & retention policies
We maintain internal Information Security and Data Retention & Disposal policies, and we’re glad to share summaries with anyone evaluating PlavaFin.
Available on requestEvaluating PlavaFin or want more detail? Email hello@plavafin.com and we’ll share our security overview.
Read the details
Our Privacy Policy spells out exactly what we collect, why, and your rights over it.