Security
Your money data stays yours.
SetBucks holds a record of your financial life, and we treat it that way. Here's what protects it, in plain words, and only what's true today.
We'll only email you about our launch. 14 days free, no card needed.
Bank connections
Your bank login never touches SetBucks
Connected through Stripe
Bank connections run on Stripe Financial Connections. You sign in with your bank, or with Stripe where your bank has no direct login. We never see or receive your bank username or password.
Read-only, and transactions only
We ask for your transactions and nothing else, along with the bank's name, the kind of account, and its last four digits. We can't move money, make payments, or change anything at your bank.
A leaked database alone can't reach your bank
Your bank connection lives at Stripe. Our database keeps only a reference to it, which does nothing without a key we store outside the database.
Disconnect whenever you want
Disconnecting a bank ends our access. The transactions already imported stay in your records unless you choose to delete them.
AI
Helpful AI, on your terms
Never used to train AI
Your data is never used to train AI models. Not by us, and not by our AI providers, whose terms prohibit training on what we send them.
AI suggests, you decide
When you forward or upload a receipt, the AI produces a suggestion. Nothing enters your ledger until you approve it.
Only what's needed, and not for long
Only the receipt you forwarded or uploaded is read, never your account history. The original is deleted within 7 days.
Your account
Hard to get into, for anyone but you
Two-factor authentication
Add an authenticator app, and every sign-in asks for a code. You get 10 backup codes in case you lose your phone, stored only as secure hashes.
Your password, again, for what matters
Sensitive actions, like deleting your account, ask for your password again, even when you're already signed in.
Limits on repeated attempts
Signing in, creating an account, entering codes and resetting a password are all rate limited, to slow down anyone trying to guess.
Card details never reach us
Subscriptions are paid through Stripe Checkout. Your card is handled by Stripe, on Stripe's page.
How data is kept
Locked down where it lives
Every record belongs to one person
Each record is isolated at the database level, so a request made as you can only reach rows that belong to you. Every table has this rule, with no exceptions.
Encrypted in transit and at rest
All traffic is encrypted, and browsers are told to use HTTPS only. All data is encrypted at rest by our database provider.
A written security program
SetBucks keeps a written information security program, with one person responsible for it. Access to production systems is limited and logged.
Honest about what we can see
Our servers read your records to calculate balances, recurring entries and reports, so we can technically access them. Any finance app that does this and claims "zero knowledge" is not being accurate.
Your data, your call
You stay in control
Not for sale
We don't sell your personal information. We don't share it for advertising, and we don't use it to build profiles for anyone else.
Export everything, any time
Download your records as PDF, Excel or CSV. Exporting keeps working with or without a subscription.
Delete your account yourself
You can delete your account from Settings. It's permanent, and it doesn't take an email to support.
Talk to a person
Questions about your data, or think you found a security problem? Email contact@setbucks.com.
No system is perfectly secure, and anyone who tells you otherwise is selling something.
That line is from our Privacy Policy, and so is the promise that comes with it: if a breach ever affects your information, we will tell you, as the law requires. The full details are in the Privacy Policy and the Terms of Service.
Clear about your money. Clear about your data.
When we open, you get read-only bank connections, two-factor authentication, and records that are never used to train AI.
We'll only email you about our launch. 14 days free, no card needed.