How we protect your data

Your bank statements and portfolio are some of the most private things you could give us. Here's what we do to keep them safe, in plain words.

Your bank statements

• The file isn't kept. When you upload a statement we read it and keep its lines, encrypted, only while you check them. Lines you don't add are dropped when you save (we keep only a one-way code, so they start unticked next time), and an upload you leave unsaved is deleted within the hour.
• Account numbers and sort codes are hidden. A line like “TFR 20-45-77 12345678” is saved as “TFR ••-••-•• ••••5678”, so the full numbers are never stored.
• The words are encrypted. Each payment's description and who it was paid to or from are encrypted in our database, with a key kept apart from it. A copy of the database on its own shows scrambled text, not your bank lines.
• We never ask for your bank login. You download the statement from your bank and upload it. We don't connect to your bank and can't move money.
• Nothing is sent anywhere else. Matching lines to categories and payees happens on our own server, with no outside service or AI tool.

Your account

• Encrypted connection only. The site only works over HTTPS, and browsers are told never to use anything else.
• Passwords are never stored. We keep a one-way hash, so nobody here can see your password.
• Guessing is blocked. After 10 wrong passwords, the account can't be logged into for 30 minutes.
• Two-factor login. Turn it on in Your account and logging in also needs a code from an app on your phone, so a stolen password isn't enough. Staff accounts always need it.

Who can see your data

• Only you, unless you ask for help. If we need to look at your portfolio to help you, we record who looked, when and why, access ends after 30 minutes, and your account page shows it. We see your tenants only as initials (more on this).
• Card details go straight to Stripe. They never reach our servers.
• Error reports carry no personal data. When something breaks, the report says which page and line of code, not who you are or what you typed.
• Hosted in the EU. The site and database are with Render in Frankfurt, Germany. The privacy notice lists everyone who helps us run the service.

In your hands

• Download everything we hold about you, from Your account.
• Delete your account and everything in it at once. Copies in our backups are overwritten within 7 days.

No system is perfectly secure, so please use a password you don't use anywhere else. If you think something's wrong, or you've found a security problem, email support@nestinsights.com and we'll look into it straight away.