Security at Brixa

In the US and Canada, Brixa links to your accounts through Plaid, the connection service behind thousands of financial apps. Brixa requests transaction and balance data only, and you can see or remove the connection at any time, in Brixa or at my.plaid.com.

In Europe, Brixa links to your accounts through Enable Banking, a licensed Account Information Service Provider (AISP) regulated under the EU’s PSD2 open-banking directive. AISP access is, by regulation, read-only: it can retrieve account information, never initiate a payment.

You authorize the connection on your bank’s own login screen. Brixa never sees your bank username or password. Access is granted by a token that you can revoke at any time, from inside Brixa or from your bank.

Your financial data is yours. We do not sell it, rent it, or share it with advertisers. Brixa makes money from a simple subscription, not from your data. Categorization may use automated processing to label transactions, but your data is never sold or used to train third-party advertising models.

Data is encrypted in transit (TLS) and at rest. Brixa is operated from the EU with data stored on EU infrastructure, and we handle personal data in line with the GDPR.

Disconnect a bank whenever you want. Export your data, or delete your account and everything in it, with one tap from Settings, no email required. When you delete, we revoke the bank connections and remove your data.