Encrypted at rest and in transit
Your data is encrypted with 256-bit AES at rest and TLS 1.3 in transit, handled by our infrastructure provider.
Security & privacy
Built to be trusted with your money
Security isn't a feature we bolted on. It's the foundation. Here's exactly how we protect your financial data.
We never see your credentials
Account connections run through Plaid. Your bank login is entered with them and is never stored or seen by Oakhold.
Read-only by design
Oakhold can read transactions to generate insights, and nothing else. It can never move, send, or withdraw money.
Privacy-first, always
We never sell your data or use it for ads. You can disconnect an account or permanently delete everything in one tap.
No training on your connected data
Oakhold uses connected account data to power your own answers and insights, not to train an Oakhold AI model.
Our practices
- Data encryption
- Encrypted at rest (AES-256) and in transit (TLS), handled by our infrastructure provider.
- Account access
- Read-only tokens via Plaid; your bank credentials never touch our servers.
- Access controls
- We follow least-privilege principles: access to user data is limited to what the product needs to run.
- AI data boundary
- Connected account data is used for your Oakhold features and answers, not to train an Oakhold AI model.
- Data ownership
- Export or permanently delete your data at any time, right from Settings.
- Architecture
- Read-only by design: the app is built so it can never move, send, or withdraw money.
- Responsible disclosure
- Found a security issue? We welcome reports at security@oakhold.ai.
Read our Privacy Policy for full details on how data is handled.