Security
Security
Capman reads your finances. It does not move your money. This page says what we do to protect your data, and what we do not claim.
Your money stays where it is
Capman never holds funds and never moves money. Bank connections are for reading accounts, balances and transactions. The AI advisor is read-only: it can look at your data, not change it.
Your bank login never reaches us
When you connect a bank, you sign in on your bank’s own screen or its connection provider’s (Plaid, or Enable Banking in Europe). We never see or store your bank password. The access token we receive is encrypted with its own key, which we can rotate.
Who can see what
- Every household member has a role (owner, member, accountant or viewer), and each role can do only what it needs to.
- The rules are enforced in the database itself, not only in the app.
- Connecting or disconnecting a bank, invites and role changes are written to an audit log.
- Signing out clears cached financial data from your browser.
How the AI handles your data
The AI treats statement text and tool output as data, never as instructions. What it sees is sent to our AI provider to produce the answer. The privacy policy lists every provider and what each receives.
In transit and at rest
Data travels over HTTPS and is encrypted at rest by our database provider. The app ships with strict browser security headers.
What we do not claim
- Capman is not end-to-end encrypted. Our servers can read your data, because the app has to read statements and show your picture.
- If you delete a bank connection, Enable Banking consents stay open at the bank until they expire.
Report a problem
If you find a security issue, write to hello@capmanlabs.ai. We read every report.