Security & privacy

Your money data, handled properly

Margio asks for two things most apps never ask for: a view of your bank transactions, and permission to let an analyst read your numbers. You should not hand either over without straight answers. Here they are.

Your bank connection

Can Margio move my money?

No. The connection is read only. We can see transactions so we can verify your numbers, but we cannot send money, take payments, or change anything in your account. That is not a policy we promise to follow. The access we request from your bank simply does not include the ability to move money.

Can Margio see my bank password?

No. You log in on your bank's own secure screen, handled by Plaid, the same service used by Venmo and major banks. Your login details go to your bank and nowhere else. Margio never sees them and never stores them.

Do you sell my data?

No. We make money one way: your subscription. Your data is never sold, never shared with advertisers, and never used for anything except showing you your own numbers.

What happens if I disconnect my bank?

Access stops immediately. The moment you disconnect, we tell Plaid to revoke the connection, and we delete the connection credentials from our records. Your past transactions stay in your account so your reports and history keep working. If you want everything gone, uninstall the app: access ends right away, and all of your data is permanently deleted within 48 hours through Shopify's standard data removal process. Every merchant's data lives behind its own wall, so removing yours cannot touch anyone else's.

The AI analyst

Does the AI read my bank account?

The analyst works from summaries, not your raw bank feed. When you ask it a question, it sees totals and trends: revenue, profit, costs, fees, your top products. It never sees individual bank transactions and never sees your customers' details.

One exception, clearly scoped: when new bank transactions arrive that our rules cannot categorize, the AI reads the transaction description and amount to suggest a category, like a bookkeeper sorting receipts. It never sees account numbers or balances, and it can never overwrite a category you chose yourself.

Is my data used to train AI?

No. Your data is processed securely by our AI provider, Anthropic, and is never used to train AI models and never shared.

Can the AI do anything to my store or my money?

No. It is read only. It can answer questions and suggest categories. It cannot move money, edit orders, change prices, or touch your settings.

Can I turn it off?

Yes. One switch in Settings turns off every AI feature at once. Off means off: nothing is sent to the AI provider, not even a summary.

Independently audited, certified providers

Margio is built on providers that publish their security credentials and submit to independent audits.

Plaid (bank connections) is certified to ISO 27001 and ISO 27701 and completes an annual SOC 2 Type II audit. Their reports are published at security.plaid.com.

Anthropic (AI provider) is certified to ISO 27001:2022 and ISO/IEC 42001:2023, the international standard for responsible AI management, and completes SOC 2 Type II audits. Their reports are published at trust.anthropic.com.

All data is encrypted in transit. Bank connection credentials are encrypted at rest.