Help·Security
Where is my data stored?
Supabase Postgres in us-east. Brokerage tokens are encrypted at rest. Stripe handles payment data; Plaid handles bank credentials.
Your tax-return inputs and engine outputs live in Supabase Postgres (us-east). Row-level security scopes every row to the owning user.
Plaid access tokens are encrypted at rest in our database; Plaid itself holds the brokerage credentials. We never see your username or password.
Payment data goes directly to Stripe — we never see your card number. We store only the Stripe customer ID and the payment status of your return.
Full retention, deletion, and third-party detail is in the privacy policy.
Still stuck? Email us.