taiga financeJoin the waitlist

Security & privacy

Your bank login never reaches us, your data is encrypted, and all of it leaves with you whenever you ask.

We don’t sell your data

Taiga Finance is paid for by its subscribers and by nobody else. There are no ads, no placements, and nothing about you goes to a data broker or an advertiser. The About page covers how the business works, and the privacy policy is the full version.

How your data is protected

  • Your bank login never reaches us. You enter it on your bank’s own screen, with Plaid. We get a read-only feed and can’t move money or change anything at the bank.
  • You read the terms before Plaid opens. A one-page consent lists what Taiga Finance receives from a bank (account names, types and balances, the last four digits of each account number, and transactions) and who else handles it. Removing the bank in Settings withdraws it: syncing stops and Plaid’s access is ended, and what was already brought in stays until you delete it.
  • No full account numbers. Taiga Finance does not ask Plaid for full account or routing numbers.
  • Encrypted in transit and at rest. The tokens that keep a bank connected are encrypted a second time inside the app.
  • No password to leak. You sign in with a link or code sent to your email, or with Google. Before a step that hands over data or access (a bulk export, a household invite, a Google Sheets connection), Taiga Finance asks you to confirm it’s you again, by email code or Google. A bot check sits on the email sign-up form. An optional device lock asks for your face, fingerprint or passcode before the app opens on that device.
  • Nobody looks without asking. Support can only open your account with your recorded permission, and you get an email before anything is shown.
  • AI gets the minimum, or nothing. Categorization sends the merchant text, the account type and whether money moved in or out, never an amount. One switch in Settings turns AI off. What we send to AI lists it feature by feature.
  • Leaving takes a click. Export every table from Settings, or delete the account outright. A delete is immediate, and backups expire within 14 days.

Who we work with

  • Plaid connects your banks, cards and brokerages, and holds the login so we never do.
  • Stripe takes payment on its own checkout page. Card details never reach Taiga Finance.
  • Cloudflare serves the site, fronts the app over HTTPS so our servers have no open ports, and runs the bot check on the sign-in form.
  • Anthropic runs the AI features. Its commercial terms don’t let it train on what we send.

Found a vulnerability? Write to security@taiga.finance. Anything else: hello@taiga.finance.