Security

Last updated October 7, 2026. See also the Privacy Policy.

How bank linking works

Linking a bank is optional and part of Pro. It runs through Plaid, a service thousands of finance apps use to connect bank accounts. You sign in to your bank inside Plaid's window, not on our site. Your bank login goes to your bank through Plaid; we never see it and never store it.

We ask Plaid for transactions only, on the accounts you choose. That is read-only access: nothing on Bonus Bound can move money, pay bills or change your accounts.

What we keep and for how long

For each linked account we keep the bank name, the account name, its last four digits, and its transactions (date, description, merchant, amount and spending category). We keep six months of transactions; older ones are deleted every night.

Unlink an account and we delete its transactions the same minute; when it is the last account linked from that bank, we also end the connection at Plaid. If you do not visit for six months, we end the connection at Plaid and you can reconnect when you come back. Delete your account and we delete your linked accounts, transactions, trips, cards and advisor chats.

How your data is protected

Every page and request uses an encrypted connection (HTTPS). The key that lets us read a linked bank from Plaid is stored encrypted in our database. Sign-in is with Google through Clerk, so we never handle a password. Payments go through Stripe; we never see or store your card number.

Report a problem

If you think something is wrong with your account or you found a security issue, email support@bonusbound.com. We read every message.