Security and privacy of your bank data.
Jeff Banks only reads your bank data and never sees your bank credentials.
Read-only.
Jeff Banks cannot make payments, transfers or changes to your accounts. On the Free and Premium plans it works with the statements you import as CSV.
The bank connection (Open Banking).
Jeff Banks can read balances and movements straight from a bank with Open Banking (PSD2), through Enable Banking, always read-only. You authorize each bank on its own website or app, with its strong authentication, and Jeff Banks never sees your credentials. Each authorization expires and you can revoke it at any time. This connection is not part of the Free or Premium plans yet.
What Jeff Banks keeps and what it doesn't.
Stored
- Jeff Banks keeps your banks and their movements, with the date, amount, currency, counterparty and the description as the bank writes it.
- It also keeps what you decide in the app, such as the category you choose for a movement.
- Your banks' account numbers are only kept masked, like ES12 •••• 3456.
- From your Google account it keeps your name, email and photo.
Never stored
- Your bank credentials never pass through Jeff Banks.
- Jeff Banks never asks you for a password, because you sign in with your Google account.
- Your card details never reach Jeff Banks, because you pay for Premium or Banks AI credits on Stripe.
Who sees your data.
Your movements and balances are seen only by the people in your workspace, and each of them can change what their role allows. Someone who shares a split with you sees only that split's expenses and payments. To give you support, the Jeff Banks team sees your name and email, and how many banks and people your workspace has. Jeff Banks does not sell or share data, and does not use it to train AI models.
What data Banks AI receives.
To suggest a category, Banks AI receives only whether money comes in or goes out, the type of movement, its name, the description and the counterparty, with numbers and emails masked. The chat works with your workspace's figures and, for each movement, its date, cleaned-up name, category and amount. Jeff Banks does not store conversations.
Encryption and sessions.
All traffic is encrypted over HTTPS. You sign in with Google, through OAuth with PKCE, and your session is an encrypted cookie no script on the page can read. It expires after 7 days or when you sign out.
Where it is stored.
The app runs on Vercel servers in the United States and keeps data in an Upstash database, under the European Union's transfer safeguards. The details and the list of providers are in the privacy policy.
Your data and your account.
From Settings you download a copy of your data in one file or delete your account. For any other right, or to ask for what the file leaves out, you can also write to mrjeffersonx@gmail.com.
Ads and tracking.
Neither the app nor this website uses analytics or advertising cookies.
The beta is invite-only.
Leave your email and we'll send you an invitation when a spot opens up.
