Read-only connections
Merva can see balances and transactions. It can't send money, withdraw, place a trade or change anything at your bank, broker, exchange or wallet.
Security
Read-only, by design.
Merva shows you where your money goes. It was built so it can never move any of it.
Encrypted in transit and at rest
Everything between your browser and Merva travels over TLS, and your data is encrypted where it's stored. Passwords are hashed with scrypt, never kept in readable form.
We never sell your data
Not to advertisers, not to data brokers, not to anyone. Merva is paid for by subscriptions, so your money data is never the product.
How Plaid works
Your bank login never touches Merva.
Banks and cards connect through Plaid, the service thousands of finance apps use to read accounts. It stands between Merva and your bank.
- You sign in on Plaid's screen, not oursWhen you connect a bank or card, Plaid opens its own window. You type your bank login there. Merva never sees your bank username or password.
- Your bank hands Plaid a read-only keyPlaid gets permission to read balances and transactions, and nothing else. Merva receives that read-only access, not your credentials.
- You can cut it off at any timeRemove a connection in Settings and Merva stops reading it straight away. You can also revoke access from your bank or from Plaid's own portal.
Brokers
Through SnapTrade, which works the same way as Plaid: you sign in with your broker and choose which accounts to share, read-only.
Exchanges
With an API key you create with read permission only. Keep trading and withdrawals switched off on the key, and Merva can't do either.
Wallets
By public address. There's nothing to sign and no keys involved, the same view anyone gets from a block explorer.
What the AI assistant can see
Ask it how a firm is doing or what you owe in taxes, and it answers from your own numbers. Here is exactly what it works with.
- The assistant only sees descriptions, amounts and dates: what a transaction was, how much, and when.
- It never sees account numbers, routing numbers, card numbers or wallet addresses. Those are stripped before anything is sent.
- Your questions are answered and saved to your own chat history, which you can delete in Settings whenever you like.
- It's optional. Turn the assistant off in Settings and nothing is sent to the AI at all.
You stay in control
Passkeys and two-factor login
Sign in with Face ID, Touch ID or a security key, and add an authenticator app as a second step.
See every device
Settings lists everywhere you're signed in. Sign out other devices with one tap.
Take your data, or delete it
Download every transaction as CSV and a year-end PDF. Delete your account and everything stored with it.