Privacy Policy

Your transactions stay with your bank. We never store them. Every question your agent asks is fetched from your bank in real time, handed back, and forgotten. What we do keep is small, listed below with why we keep it and for how long.

BankBridge is operated by Great Work LLC, 651 N Broad St, Suite 206, Middletown, DE 19709, USA (“we”). This policy covers the bankbridge.money website, the BankBridge MCP server, and the BankBridge apps and plugins for AI assistants such as ChatGPT and Claude.

What we collect, why, and how long we keep it

• Account details: your email address, your Stripe customer and subscription IDs, your plan (monthly or annual), and your referral code. Used to sign you in, bill you, and send account email. Kept until you delete your account.
• Sign in with Google (optional):if you choose “Continue with Google”, Google shares your name, email address, whether Google has verified that email, and your profile photo URL. We keep only your email address and your Google account ID, to recognize you the next time you sign in. Your name and photo are discarded, and we don’t keep Google access tokens or get access to anything else in your Google account. Kept until you delete your account. You can always sign in with an email code instead.
• Bank connections:an access token for each bank you link (encrypted with AES-256-GCM), plus the bank’s name and connection status. Used only to fetch your data when your agent asks. Deleted when you disconnect that bank, delete your account, or within a day after your subscription ends.
• Agent access: API keys you create (a SHA-256 hash, plus an encrypted copy so you can reveal the key in your dashboard) and the sign-in grants of AI apps you connect (app name and redirect address). Used to check that a request really comes from you. Kept until you revoke them or delete your account.
• Usage log:for each request to the MCP server, the tool name, time, calling app and version, user agent, IP address, response status, and response time. Used to show you your agent’s activity, debug problems, and stop abuse. It never contains your question, the tool’s inputs, or what we returned. Deleted after 30 days. Daily counts of connections per app (no IP address) are kept for 13 months.
• Email and feedback records:which account emails we sent you and when, your email preferences, and any answers you give in the cancellation survey. Used to avoid duplicate emails and improve BankBridge. Kept until you delete your account.
• Billing audit records: when a bank connection was removed and why, and referral credits. They carry only an internal ID, not your email. Used for billing and tax records. Kept up to 7 years.
• Website data: web server logs (IP address, page requested, browser type), kept 14 days for security. Google Analytics measures visits to bankbridge.money using cookies; it keeps event data for no more than 14 months. Cloudflare Turnstile checks the sign-in form for bots. We also count page views ourselves as daily totals of page, referring site and campaign tag, with no IP address, cookie or account attached; those totals are kept 13 months.

What we never store

Your accounts. Your balances. Your transactions. Your holdings. Your investment history. Any summary or categorization of your financial data. We don’t ask for, and never receive, your bank username or password: you enter those directly with the bank-connection provider. We don’t collect card numbers (Stripe handles payment), government IDs, or health information.

How queries work

When your agent asks a question (“how much did I spend on restaurants last month?”), BankBridge fetches the data from your bank, sends the result to the AI app that asked, and forgets it. There is no cache. The bank connection is read-only: we cannot move money, make payments, place trades, or change anything at your bank.

Who receives your data

• The AI app you connect(for example ChatGPT, Claude, or Cursor) receives the results of the tools it calls, because that is what you asked it to do. Its own privacy policy governs what it does with them.
• Plaid Inc. connects to your banks. By linking a bank, you agree that the data shared through that connection is handled under thePlaid End User Privacy Policy.
• Stripe processes payments.
• Googlesigns you in, only if you choose “Continue with Google”. Google learns that you signed in to BankBridge; its own privacy policy covers that.
• Resend delivers our emails (sign-in links, receipts, account notices).
• Google Analytics andCloudflare Turnstile receive website usage data as described above.
• DigitalOcean hosts our servers in the United States.
• Authorities, when the law requires it.

Each service provider processes data only to provide its service to us. We don’t sell your data, share it with advertisers, or use it to train AI models. BankBridge has no ads; it is paid for by your subscription.

Security

Bank access tokens and stored API keys are encrypted at rest with AES-256-GCM. All traffic to and from bankbridge.money uses TLS 1.2 or 1.3, and so does every request between our servers and the bank-connection provider.

Your controls

• Disconnect any bank from your dashboard at any time.
• Revoke API keys, or disconnect BankBridge inside the AI app, to stop an app’s access.
• Turn off optional emails with the unsubscribe link in any of them.
• Delete your account from Settings. This cancels your subscription, revokes every bank connection, and deletes your account details, usage log, and email and feedback records right away. Only the billing audit records above remain.
• Block or clear analytics cookies in your browser.
• Emailhello@greatwork.companyto get a copy of your data or to ask any privacy question. We reply within 30 days.

Children

BankBridge is not directed to children under 13, and we don’t knowingly collect their personal data. If you believe a child under 13 has given us personal data, email us and we will delete it.

Changes

If we change this policy, we update the date at the top. For significant changes, we email account holders before they take effect.

Questions?hello@greatwork.company