Privacy & Security

Your bank credentials stay with your bank

You choose how your data flows in — link your bank or import your own. We don't sell your data to advertisers. Here's exactly how PennySlice handles your information.

Your data, your choice

Link your bank or import your own — we never store your bank password. Bank linking uses secure OAuth, so your login stays with your bank and we never see or store it. Or export your own files: CSV, Excel, OFX, PDF, and more.

No data selling. Ever.

Your spending data is never sold to advertisers, data brokers, or any third party for marketing purposes. We don't show ads. Our revenue comes from subscriptions, not your data.

You stay in control

Export your data anytime. Delete your account and all associated data whenever you want. No lock-in, no dark patterns, no hoops to jump through.

Price Lock Guarantee

The price you sign up at is locked for as long as you remain subscribed. If we raise prices in the future, your rate stays the same. No silent increases, no surprises on your bill.

What data goes to AI

When you ask PennySlice a question, here's exactly what gets sent to the AI provider — and what doesn't.

Sent to AI
  • Merchant names
  • Transaction amounts
  • Category names
  • Spending analytics & patterns
Never sent to AI
  • Your name or email
  • Bank account numbers
  • Bank credentials
  • Payment card details

Third-party services

Every service PennySlice uses, what they see, and what they don't.

Plaid
Bank linking (optional, US/Canada)

Sees: Read-only transactions & balances for accounts you choose to link, via OAuth

Doesn't see: Your bank username or password — you log in directly with your bank, and it's never shared with us

Cerebras / Groq
AI processing

Sees: Merchant names, transaction amounts, category names, spending analytics

Doesn't see: Your name, email, bank account numbers, or any personally identifiable information

Stripe
Payment processing

Sees: Payment card details, billing address, email for receipts

Doesn't see: Your transaction data, spending patterns, or financial information

Resend
Transactional email

Sees: Your email address, email content (reports, confirmations)

Doesn't see: Your transaction data, spending patterns, or bank information

MinIO
File storage (self-hosted, in Canada)

Sees: Uploaded files (receipts, statements) — on our own servers in Canada

Doesn't see: Runs on our servers, not a third-party cloud service

Regulatory compliance

PennySlice is built to meet privacy regulations across Canada, the United States, and the European Union.

PIPEDA
Canada
  • Designated Privacy Officer
  • 72-hour breach notification
  • Consent withdrawal rights
  • Complaint escalation to Privacy Commissioner
CCPA / CPRA
California, USA
  • Right to know, delete, and correct
  • Do Not Sell or Share disclosure
  • Sensitive personal information limits
  • Non-discrimination guarantee
GDPR
European Union
  • Lawful basis for all processing
  • Data Protection Impact Assessment
  • Right to object to automated decisions
  • Standard Contractual Clauses for transfers

Read our full Privacy Policy and Cookie Policy for complete details.

Common questions

How does bank linking work? Do you see my login?

No. Bank linking uses OAuth — you authenticate directly at your own bank's website. PennySlice (and Plaid, our bank-linking provider) never see or store your bank username or password. We receive a scoped, revocable read token that gives us access to the transactions and balances you choose to share. You can revoke that access anytime from your PennySlice settings or directly through your bank.

Do I have to link my bank?

No. Bank linking is optional and available on paid plans only. You can use PennySlice entirely with your own exported files — CSV, Excel, OFX, PDF, and more. Import-only is a fully supported path with no feature loss for non-linking features. The choice is yours.

What happens to my data when AI processes it?

When you ask PennySlice a question, relevant transaction data (merchant names, amounts, categories) is sent to our AI provider for processing. Personal information like your name, email, and account numbers is never included. The AI provider processes the request and discards the data — it is not stored or used to train their models.

Can I delete all my data?

Yes. You can delete your account at any time from your settings. This permanently removes all your transaction data, categories, reports, and uploaded files. For linked bank accounts, we also call Plaid to remove the connection so they stop delivering data. No retention period, no hidden backups.

Do you share data with advertisers?

No. We don't show ads, and we don't sell or share your data with advertisers, data brokers, or any third party for marketing purposes. Our only revenue source is subscriptions.

Is my data encrypted?

All data is encrypted in transit (TLS/HTTPS). Your data lives on our own servers in Canada — not a third-party cloud — so it is not held under US jurisdiction. If you link a bank, the Plaid access token is encrypted at rest and is never stored in plaintext.

Ready to track expenses without the trade-offs?

Free tier available. No credit card required.