Your data, under your control. And only you can get in.
Follow your data from the moment you connect a bank to the day it's deleted. Each step shows the screen or email you'll see.
Last reviewed 27 September 2026
- Your data is stored in Australia (Sydney).
- Every account needs a second factor.
- You can disconnect a bank any time, and we delete its data.
- We never sell your data.
What happens to your data when you connect a bank?
You choose the accounts to share when you connect. The data is stored in Sydney, we look at it only to fix a problem you report, keep Busybee running and secure, or meet a legal obligation, and it's deleted when you disconnect or leave.
You connect at your bank.
You sign in to your bank and choose the accounts to share. Busybee never sees your banking password.
- Data
- Balances and transactions
Stored in Sydney, encrypted.
Your data is stored in Sydney and encrypted in the database. Our logs never contain your transactions, amounts or merchant names.
Technical detail
The database runs in Sydney and is encrypted at rest. The identifiers that link your account to your bank connection are sealed again with AES-256-GCM and bound to your account, so a copied value can't be opened anywhere else. Requests are handled on Cloudflare's network, which processes them in memory.
Only you get in.
Every account has a password plus a passkey or authenticator app. When someone signs in from a browser we haven't seen, you get an email with a link that ends every session at once.
Technical detail
Passwords are 12 to 128 characters and are checked against passwords known to have leaked. A sign-in needs a password plus a passkey, authenticator code or backup code, or a passkey on its own. A browser you choose to trust skips the second factor for 30 days.
Your account was just signed in to from a device we haven't seen before.
- Device
- Firefox on Windows
- Approximate location
- Brooklyn, NY
- Time
- Sep 24, 2026, 9:41 PM EDT
If this was you, there's nothing to do.
Not you? End every session now. Anyone signed in is signed out, and your password stops working until you set a new one.
End all sessionsThis link works once and expires in 7 days.
You can see everything we hold.
Settings, Your data shows each bank you connected, when each sync collected data, and an activity log of changes to your connections and data.
Leave any time.
Disconnect one bank, or delete your account. We end the connection first and then delete the data. You can download everything before you go.
Accounts left with no bank connected for 12 months are deleted, with a warning a month before.
- Last synced
- 2 hours ago
- Given
- Sep 17, 2026
We stop collecting from Chase, end the consent at your bank, and delete 461 transactions collected through this consent, 3 accounts and the recurring series, category changes and merchant names built from them that no other bank still uses. This can't be undone. This record stays so you can see what was collected.
What do Busybee emails contain?
Only what you need to act on. Never your money or your name, so an email that's forwarded or read over your shoulder gives nothing away.
- One-time codes
- Bank names
- Dates
- Device descriptions
- Approximate location
- Amounts
- Merchants
- Account numbers
- Your name
How do I report a security issue?
Email us with what you found and how to reproduce it. support@busybee.money
Please don't include anyone else's personal or financial data in your report.
