Legal

Security

Last updated: June 15, 2026

SpendIntel AI is built security-first. Here is exactly how your bank data is connected, encrypted, isolated, and monitored.

Security pillars

  • Multi-factor authentication. MFA (TOTP) support adds a second factor to protect account access, with enforced MFA for administrative access.
  • Encrypted token storage. Bank access tokens are encrypted at rest using AES-256-GCM and kept in an access-restricted store — never exposed to the browser.
  • Secure, read-only Plaid connection. You authenticate with your bank inside Plaid’s own window. We receive a revocable, read-only token — we can read transactions, never move money.
  • Privacy-first architecture. We analyze your data to help you — we do not sell it. Your financial data is used to power your insights, and nothing else.
  • Controlled access & data isolation. Row-level security and per-user isolation ensure your data is only ever visible to you. Administrative access is role-restricted and gated by MFA.
  • Audit logging. Sensitive operations are recorded in an audit trail, supporting accountability and incident response.
  • Continuous monitoring. The platform self-monitors with automated health checks and error tracking — with sensitive data scrubbed before it leaves the system.
  • Disconnect anytime. You stay in control. Disconnecting an account removes the connection at Plaid, clears the encrypted token, and stops all syncing.

How a secure connection works

  • 1. You authenticate at your bank. Inside Plaid’s secure window — we never see your credentials.
  • 2. Plaid issues a read-only token. Revocable and limited to reading transactions.
  • 3. We encrypt & analyze. The token is AES-256-GCM encrypted; we analyze transactions to help you save.

Straight talk about what we are — and aren’t

  • SpendIntel AI is a financial software tool that analyzes your transactions to help you understand and reduce spending.
  • Bank connections are provided by Plaid; we use read-only access and never store your bank credentials.
  • SpendIntel AI is not a bank, lender, or certified financial advisor, is not FDIC insured, and does not provide financial, legal, or tax advice.

Policies & contact

Operated by Major Retail LLC. Questions? Email info@majoretailllc.com. See our Privacy Policy, Terms of Service, Data Retention, and the Account Connections transparency page.