Security
Your transactions tell us how to optimize your wallet. Nothing else gets done with that data — not sold, not advertised against, not shared with card issuers. Here's exactly how we protect it.
We connect to your banks through Plaid — the same regulated provider used by Venmo, Robinhood, Coinbase, and 12,000+ apps. Your login credentials go directly to Plaid; we never see them. Our access is read-only by construction. We can see transactions, never move money.
All connection tokens, points balances, and personal data are encrypted at rest using AES-256 — the standard banks use. Every byte between your browser and our servers travels over TLS. Nothing is stored or transmitted in plain text.
Sign-in requires SMS verification by default. We use the same one-time-code flow your bank does. Sessions auto-refresh every 60 minutes; idle sessions expire. If you lose access, password reset goes through your verified phone.
All your data lives in a single SavvX account. We don't sync to ad networks, push profiles to data brokers, or fragment your data across products you didn't ask for. Your spending pattern stays inside SavvX.
Our Sentinel service monitors prod 24/7 for anomalous activity, suspicious sign-ins, and rate change events. We alert you on unrecognized devices and notify you of any data-impacting incident within 72 hours of detection.
Security researchers: please send findings to security@savvx.com. We respond within 48 hours and don't pursue legal action against good-faith research that follows responsible disclosure norms (no destructive testing, no PII exfiltration, no public disclosure before fix).
Most credit card optimization sites monetize your data — affiliate commissions when you sign up for a card they recommend, cross-sells to insurance/loan products, ad targeting against your spending patterns.
SavvX makes money from your subscription. That's the whole business model. No affiliate links. No card-issuer partnerships. No ads. No data sales. Ever.
We store
We never store
You can manage everything from Account → Manage Your Data:
Questions about security or data handling? Email support@savvx.com. Security researchers: use security@savvx.com for responsible disclosure.