Frequently Asked Questions

Is my data safe?

We are security freaks ourselves, so security tops our list of priorities, along with building a product that our users will love. We undertake the following steps to protect your data:

• We never store (or have access to) your bank login details
• We get read-only access to your transaction data so in the unlikely event of a breach no money can be transferred out of your bank account
• We use symmetric cryptography (AES) to store any sensitive data
• We use state-of-the-art password algorithms
• We use 256-bit TLS encryption to communicate between the browser and our servers
• We are a registered data controller and always act in compliance with the Data Protection Act
• Our servers run on Amazon's cloud, trusted by some of the biggest financial institutions in the world

If you want to learn more about our approach to security and privacy feel free to contact us at security@withplum.com.

Do you store my bank login details?

No, we do not. We forward your login details directly to Yodlee, our data partner. Yodlee is the world leader in transaction aggregation, the process of granting applications read-only access to your data. Yodlee has been around for 17 years. It supports over 5000 financial institutions worldwide and it used by a number of major banks in the US and the UK as well. You can read more on Yodlee's security practices here.

Does Facebook have access to my bank details or transactions?

No, Facebook does not have access to your bank details or your bank transactions. When you sign up, your account setup (including linking your bank account) is done in a secure webview. A webview is a website embedded into Facebook Messenger and it is generated by our servers, not by Facebook. Your bank login is transmitted encrypted from the webview to our server and is then forwarded to Yodlee, our aggregation partner, for further encryption and safe storage.