Security

How we protect your account and your data.

Encryption

All traffic to Finralis is encrypted in transit over HTTPS/TLS. Passwords are never stored in plain text, only a salted hash. Sensitive secrets stored at rest (like two-factor authentication keys) are encrypted with a key that is never stored in the database itself.

Two-Factor Authentication

You can enable two-factor authentication (TOTP, via any standard authenticator app) on your account from Profile > Security, along with one-time backup codes in case you lose access to your device. Sensitive actions (like changing your email, changing your password, or deleting your account) require you to re-confirm your identity, even within an active session.

Account & Session Protections

• Login attempts are rate-limited to slow down automated password guessing
• You're notified by email when your account is signed into from a new device
• Changing your password immediately signs out any other active sessions

Bank Account Syncing (Coming Soon)

Finralis plans to offer optional bank and credit account syncing through Plaid, a widely used financial data provider. When this launches: your bank credentials are entered directly into Plaid's secure interface and never touch Finralis's servers; access is read-only — Finralis will never be able to move money in or out of your accounts; we will only request transaction and balance data, nothing more; and we plan to require two-factor authentication be enabled before you can connect a bank account.

Your Data

Your financial data is yours. We never sell it, and we never use it for advertising. You can permanently delete your account and all associated data at any time from Profile > Danger Zone. If you cancel a paid plan or disconnect a linked bank account, the underlying connection is severed and the associated access is revoked.

Report a Security Issue

If you believe you've found a security vulnerability in Finralis, please email Info@Finralis.com with details. We take these reports seriously and will respond as quickly as we can.